Jul 15 11:19:01.726073 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 15 11:19:01.726093 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Jul 15 10:06:30 -00 2025 Jul 15 11:19:01.726101 kernel: efi: EFI v2.70 by EDK II Jul 15 11:19:01.726106 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 15 11:19:01.726111 kernel: random: crng init done Jul 15 11:19:01.726117 kernel: ACPI: Early table checksum verification disabled Jul 15 11:19:01.726123 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 15 11:19:01.726130 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 15 11:19:01.726136 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726141 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726147 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726154 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726159 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726165 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726173 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726179 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726184 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:19:01.726190 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 15 11:19:01.726196 kernel: NUMA: Failed to initialise from firmware Jul 15 11:19:01.726202 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 15 11:19:01.726208 kernel: NUMA: NODE_DATA [mem 0xdcb0a900-0xdcb0ffff] Jul 15 11:19:01.726214 kernel: Zone ranges: Jul 15 11:19:01.726220 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 15 11:19:01.726226 kernel: DMA32 empty Jul 15 11:19:01.726232 kernel: Normal empty Jul 15 11:19:01.726238 kernel: Movable zone start for each node Jul 15 11:19:01.726243 kernel: Early memory node ranges Jul 15 11:19:01.726249 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 15 11:19:01.726255 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 15 11:19:01.726260 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 15 11:19:01.726266 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 15 11:19:01.726271 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 15 11:19:01.726277 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 15 11:19:01.726283 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 15 11:19:01.726288 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 15 11:19:01.726295 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 15 11:19:01.726301 kernel: psci: probing for conduit method from ACPI. Jul 15 11:19:01.726306 kernel: psci: PSCIv1.1 detected in firmware. Jul 15 11:19:01.726312 kernel: psci: Using standard PSCI v0.2 function IDs Jul 15 11:19:01.726318 kernel: psci: Trusted OS migration not required Jul 15 11:19:01.726326 kernel: psci: SMC Calling Convention v1.1 Jul 15 11:19:01.726332 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 15 11:19:01.726340 kernel: ACPI: SRAT not present Jul 15 11:19:01.726346 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 15 11:19:01.726352 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 15 11:19:01.726359 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 15 11:19:01.726365 kernel: Detected PIPT I-cache on CPU0 Jul 15 11:19:01.726371 kernel: CPU features: detected: GIC system register CPU interface Jul 15 11:19:01.726377 kernel: CPU features: detected: Hardware dirty bit management Jul 15 11:19:01.726383 kernel: CPU features: detected: Spectre-v4 Jul 15 11:19:01.726389 kernel: CPU features: detected: Spectre-BHB Jul 15 11:19:01.726396 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 15 11:19:01.726402 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 15 11:19:01.726408 kernel: CPU features: detected: ARM erratum 1418040 Jul 15 11:19:01.726420 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 15 11:19:01.726426 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 15 11:19:01.726432 kernel: Policy zone: DMA Jul 15 11:19:01.726439 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=66cb9a8d6ebbbd62ba3e197b019773f14f902d0ee05716ff2fc41a726e431e67 Jul 15 11:19:01.726446 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:19:01.726452 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:19:01.726458 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:19:01.726464 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:19:01.726473 kernel: Memory: 2457336K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114952K reserved, 0K cma-reserved) Jul 15 11:19:01.726479 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:19:01.726485 kernel: trace event string verifier disabled Jul 15 11:19:01.726491 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 15 11:19:01.726497 kernel: rcu: RCU event tracing is enabled. Jul 15 11:19:01.726504 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:19:01.726510 kernel: Trampoline variant of Tasks RCU enabled. Jul 15 11:19:01.726516 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:19:01.726522 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:19:01.726528 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:19:01.726534 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 15 11:19:01.726542 kernel: GICv3: 256 SPIs implemented Jul 15 11:19:01.726548 kernel: GICv3: 0 Extended SPIs implemented Jul 15 11:19:01.726554 kernel: GICv3: Distributor has no Range Selector support Jul 15 11:19:01.726559 kernel: Root IRQ handler: gic_handle_irq Jul 15 11:19:01.726565 kernel: GICv3: 16 PPIs implemented Jul 15 11:19:01.726571 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 15 11:19:01.726577 kernel: ACPI: SRAT not present Jul 15 11:19:01.726583 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 15 11:19:01.726589 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 15 11:19:01.726596 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 15 11:19:01.726602 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 15 11:19:01.726608 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 15 11:19:01.726615 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:19:01.726621 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 15 11:19:01.726628 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 15 11:19:01.726634 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 15 11:19:01.726643 kernel: arm-pv: using stolen time PV Jul 15 11:19:01.726650 kernel: Console: colour dummy device 80x25 Jul 15 11:19:01.726656 kernel: ACPI: Core revision 20210730 Jul 15 11:19:01.726662 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 15 11:19:01.726669 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:19:01.726675 kernel: LSM: Security Framework initializing Jul 15 11:19:01.726682 kernel: SELinux: Initializing. Jul 15 11:19:01.726689 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:19:01.726695 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:19:01.726701 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:19:01.726707 kernel: Platform MSI: ITS@0x8080000 domain created Jul 15 11:19:01.726713 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 15 11:19:01.726720 kernel: Remapping and enabling EFI services. Jul 15 11:19:01.726726 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:19:01.726732 kernel: Detected PIPT I-cache on CPU1 Jul 15 11:19:01.726740 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 15 11:19:01.726746 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 15 11:19:01.726752 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:19:01.726759 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 15 11:19:01.726765 kernel: Detected PIPT I-cache on CPU2 Jul 15 11:19:01.726771 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 15 11:19:01.726778 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 15 11:19:01.726784 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:19:01.726790 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 15 11:19:01.726796 kernel: Detected PIPT I-cache on CPU3 Jul 15 11:19:01.726804 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 15 11:19:01.726820 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 15 11:19:01.726826 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:19:01.726844 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 15 11:19:01.726855 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:19:01.726863 kernel: SMP: Total of 4 processors activated. Jul 15 11:19:01.726870 kernel: CPU features: detected: 32-bit EL0 Support Jul 15 11:19:01.726876 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 15 11:19:01.726883 kernel: CPU features: detected: Common not Private translations Jul 15 11:19:01.726890 kernel: CPU features: detected: CRC32 instructions Jul 15 11:19:01.726896 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 15 11:19:01.726903 kernel: CPU features: detected: LSE atomic instructions Jul 15 11:19:01.726910 kernel: CPU features: detected: Privileged Access Never Jul 15 11:19:01.726917 kernel: CPU features: detected: RAS Extension Support Jul 15 11:19:01.726924 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 15 11:19:01.726930 kernel: CPU: All CPU(s) started at EL1 Jul 15 11:19:01.726937 kernel: alternatives: patching kernel code Jul 15 11:19:01.726945 kernel: devtmpfs: initialized Jul 15 11:19:01.726951 kernel: KASLR enabled Jul 15 11:19:01.726958 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:19:01.726965 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:19:01.726971 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:19:01.726978 kernel: SMBIOS 3.0.0 present. Jul 15 11:19:01.726984 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 15 11:19:01.726991 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:19:01.726997 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 15 11:19:01.727005 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 15 11:19:01.727012 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 15 11:19:01.727018 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:19:01.727025 kernel: audit: type=2000 audit(0.032:1): state=initialized audit_enabled=0 res=1 Jul 15 11:19:01.727032 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:19:01.727038 kernel: cpuidle: using governor menu Jul 15 11:19:01.727045 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 15 11:19:01.727051 kernel: ASID allocator initialised with 32768 entries Jul 15 11:19:01.727058 kernel: ACPI: bus type PCI registered Jul 15 11:19:01.727065 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:19:01.727072 kernel: Serial: AMBA PL011 UART driver Jul 15 11:19:01.727078 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:19:01.727085 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 15 11:19:01.727091 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:19:01.727098 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 15 11:19:01.727105 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:19:01.727111 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 15 11:19:01.727118 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:19:01.727126 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:19:01.727133 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:19:01.727139 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:19:01.727145 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:19:01.727152 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:19:01.727159 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:19:01.727165 kernel: ACPI: Interpreter enabled Jul 15 11:19:01.727171 kernel: ACPI: Using GIC for interrupt routing Jul 15 11:19:01.727178 kernel: ACPI: MCFG table detected, 1 entries Jul 15 11:19:01.727186 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 15 11:19:01.727192 kernel: printk: console [ttyAMA0] enabled Jul 15 11:19:01.727199 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:19:01.727315 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:19:01.727378 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 15 11:19:01.727450 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 15 11:19:01.727510 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 15 11:19:01.727570 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 15 11:19:01.727579 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 15 11:19:01.727586 kernel: PCI host bridge to bus 0000:00 Jul 15 11:19:01.727652 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 15 11:19:01.727721 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 15 11:19:01.727777 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 15 11:19:01.727882 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:19:01.727962 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 15 11:19:01.728030 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:19:01.728090 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 15 11:19:01.728150 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 15 11:19:01.728209 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 15 11:19:01.728269 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 15 11:19:01.728328 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 15 11:19:01.728390 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 15 11:19:01.728452 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 15 11:19:01.728509 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 15 11:19:01.728562 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 15 11:19:01.728570 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 15 11:19:01.728577 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 15 11:19:01.728584 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 15 11:19:01.728592 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 15 11:19:01.728599 kernel: iommu: Default domain type: Translated Jul 15 11:19:01.728605 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 15 11:19:01.728612 kernel: vgaarb: loaded Jul 15 11:19:01.728618 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:19:01.728625 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:19:01.728632 kernel: PTP clock support registered Jul 15 11:19:01.728638 kernel: Registered efivars operations Jul 15 11:19:01.728645 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 15 11:19:01.728651 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:19:01.728659 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:19:01.728666 kernel: pnp: PnP ACPI init Jul 15 11:19:01.728734 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 15 11:19:01.728744 kernel: pnp: PnP ACPI: found 1 devices Jul 15 11:19:01.728750 kernel: NET: Registered PF_INET protocol family Jul 15 11:19:01.728757 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:19:01.728764 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:19:01.728771 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:19:01.728779 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:19:01.728786 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:19:01.728793 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:19:01.728799 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:19:01.728806 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:19:01.728823 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:19:01.728829 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:19:01.728836 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 15 11:19:01.728843 kernel: kvm [1]: HYP mode not available Jul 15 11:19:01.728851 kernel: Initialise system trusted keyrings Jul 15 11:19:01.728858 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:19:01.728864 kernel: Key type asymmetric registered Jul 15 11:19:01.728870 kernel: Asymmetric key parser 'x509' registered Jul 15 11:19:01.728877 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:19:01.728884 kernel: io scheduler mq-deadline registered Jul 15 11:19:01.728890 kernel: io scheduler kyber registered Jul 15 11:19:01.728897 kernel: io scheduler bfq registered Jul 15 11:19:01.728903 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 15 11:19:01.728911 kernel: ACPI: button: Power Button [PWRB] Jul 15 11:19:01.728918 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 15 11:19:01.728981 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 15 11:19:01.728990 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:19:01.728996 kernel: thunder_xcv, ver 1.0 Jul 15 11:19:01.729003 kernel: thunder_bgx, ver 1.0 Jul 15 11:19:01.729010 kernel: nicpf, ver 1.0 Jul 15 11:19:01.729016 kernel: nicvf, ver 1.0 Jul 15 11:19:01.729080 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 15 11:19:01.729137 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-15T11:19:01 UTC (1752578341) Jul 15 11:19:01.729146 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 15 11:19:01.729152 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:19:01.729159 kernel: Segment Routing with IPv6 Jul 15 11:19:01.729165 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:19:01.729172 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:19:01.729178 kernel: Key type dns_resolver registered Jul 15 11:19:01.729185 kernel: registered taskstats version 1 Jul 15 11:19:01.729193 kernel: Loading compiled-in X.509 certificates Jul 15 11:19:01.729200 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: 1835a6fea2ba29f82433ea6fde09cb345fc75fe9' Jul 15 11:19:01.729206 kernel: Key type .fscrypt registered Jul 15 11:19:01.729213 kernel: Key type fscrypt-provisioning registered Jul 15 11:19:01.729219 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:19:01.729226 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:19:01.729232 kernel: ima: No architecture policies found Jul 15 11:19:01.729239 kernel: clk: Disabling unused clocks Jul 15 11:19:01.729245 kernel: Freeing unused kernel memory: 36416K Jul 15 11:19:01.729253 kernel: Run /init as init process Jul 15 11:19:01.729260 kernel: with arguments: Jul 15 11:19:01.729266 kernel: /init Jul 15 11:19:01.729273 kernel: with environment: Jul 15 11:19:01.729279 kernel: HOME=/ Jul 15 11:19:01.729285 kernel: TERM=linux Jul 15 11:19:01.729292 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:19:01.729300 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:19:01.729310 systemd[1]: Detected virtualization kvm. Jul 15 11:19:01.729317 systemd[1]: Detected architecture arm64. Jul 15 11:19:01.729324 systemd[1]: Running in initrd. Jul 15 11:19:01.729331 systemd[1]: No hostname configured, using default hostname. Jul 15 11:19:01.729338 systemd[1]: Hostname set to . Jul 15 11:19:01.729345 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:19:01.729352 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:19:01.729370 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:19:01.729380 systemd[1]: Reached target cryptsetup.target. Jul 15 11:19:01.729386 systemd[1]: Reached target paths.target. Jul 15 11:19:01.729393 systemd[1]: Reached target slices.target. Jul 15 11:19:01.729400 systemd[1]: Reached target swap.target. Jul 15 11:19:01.729407 systemd[1]: Reached target timers.target. Jul 15 11:19:01.729420 systemd[1]: Listening on iscsid.socket. Jul 15 11:19:01.729427 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:19:01.729436 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:19:01.729443 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:19:01.729450 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:19:01.729457 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:19:01.729463 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:19:01.729470 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:19:01.729477 systemd[1]: Reached target sockets.target. Jul 15 11:19:01.729484 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:19:01.729491 systemd[1]: Finished network-cleanup.service. Jul 15 11:19:01.729499 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:19:01.729506 systemd[1]: Starting systemd-journald.service... Jul 15 11:19:01.729513 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:19:01.729520 systemd[1]: Starting systemd-resolved.service... Jul 15 11:19:01.729527 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:19:01.729534 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:19:01.729541 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:19:01.729548 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:19:01.729554 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:19:01.729563 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:19:01.729570 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:19:01.729577 kernel: audit: type=1130 audit(1752578341.729:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.729587 systemd-journald[290]: Journal started Jul 15 11:19:01.729627 systemd-journald[290]: Runtime Journal (/run/log/journal/7ee405d8e50047799c7c2440996de333) is 6.0M, max 48.7M, 42.6M free. Jul 15 11:19:01.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.722042 systemd-modules-load[291]: Inserted module 'overlay' Jul 15 11:19:01.736149 systemd[1]: Started systemd-journald.service. Jul 15 11:19:01.736169 kernel: audit: type=1130 audit(1752578341.732:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.732000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.743000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.741039 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:19:01.746805 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:19:01.746835 kernel: audit: type=1130 audit(1752578341.743:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.746845 kernel: Bridge firewalling registered Jul 15 11:19:01.746386 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:19:01.747348 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 15 11:19:01.749938 systemd-resolved[292]: Positive Trust Anchors: Jul 15 11:19:01.749951 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:19:01.749978 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:19:01.754163 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 15 11:19:01.762652 kernel: SCSI subsystem initialized Jul 15 11:19:01.762671 kernel: audit: type=1130 audit(1752578341.758:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.762721 dracut-cmdline[307]: dracut-dracut-053 Jul 15 11:19:01.762721 dracut-cmdline[307]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=66cb9a8d6ebbbd62ba3e197b019773f14f902d0ee05716ff2fc41a726e431e67 Jul 15 11:19:01.758505 systemd[1]: Started systemd-resolved.service. Jul 15 11:19:01.759858 systemd[1]: Reached target nss-lookup.target. Jul 15 11:19:01.772294 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:19:01.772314 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:19:01.772329 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:19:01.773817 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 15 11:19:01.774587 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:19:01.779117 kernel: audit: type=1130 audit(1752578341.774:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.776522 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:19:01.784107 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:19:01.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.787834 kernel: audit: type=1130 audit(1752578341.784:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.827837 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:19:01.839847 kernel: iscsi: registered transport (tcp) Jul 15 11:19:01.854841 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:19:01.854886 kernel: QLogic iSCSI HBA Driver Jul 15 11:19:01.892699 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:19:01.893000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.895726 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:19:01.897577 kernel: audit: type=1130 audit(1752578341.893:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:01.949855 kernel: raid6: neonx8 gen() 13453 MB/s Jul 15 11:19:01.965829 kernel: raid6: neonx8 xor() 10740 MB/s Jul 15 11:19:01.982828 kernel: raid6: neonx4 gen() 13489 MB/s Jul 15 11:19:01.999837 kernel: raid6: neonx4 xor() 11104 MB/s Jul 15 11:19:02.016830 kernel: raid6: neonx2 gen() 12883 MB/s Jul 15 11:19:02.033831 kernel: raid6: neonx2 xor() 10333 MB/s Jul 15 11:19:02.050840 kernel: raid6: neonx1 gen() 10574 MB/s Jul 15 11:19:02.067831 kernel: raid6: neonx1 xor() 8790 MB/s Jul 15 11:19:02.084840 kernel: raid6: int64x8 gen() 6241 MB/s Jul 15 11:19:02.101836 kernel: raid6: int64x8 xor() 3527 MB/s Jul 15 11:19:02.118828 kernel: raid6: int64x4 gen() 7201 MB/s Jul 15 11:19:02.135830 kernel: raid6: int64x4 xor() 3842 MB/s Jul 15 11:19:02.152830 kernel: raid6: int64x2 gen() 6134 MB/s Jul 15 11:19:02.169829 kernel: raid6: int64x2 xor() 3310 MB/s Jul 15 11:19:02.186831 kernel: raid6: int64x1 gen() 5041 MB/s Jul 15 11:19:02.203901 kernel: raid6: int64x1 xor() 2640 MB/s Jul 15 11:19:02.203922 kernel: raid6: using algorithm neonx4 gen() 13489 MB/s Jul 15 11:19:02.203939 kernel: raid6: .... xor() 11104 MB/s, rmw enabled Jul 15 11:19:02.204962 kernel: raid6: using neon recovery algorithm Jul 15 11:19:02.216214 kernel: xor: measuring software checksum speed Jul 15 11:19:02.216245 kernel: 8regs : 17199 MB/sec Jul 15 11:19:02.216262 kernel: 32regs : 20702 MB/sec Jul 15 11:19:02.217433 kernel: arm64_neon : 27654 MB/sec Jul 15 11:19:02.217443 kernel: xor: using function: arm64_neon (27654 MB/sec) Jul 15 11:19:02.269831 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 15 11:19:02.279334 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:19:02.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:02.282000 audit: BPF prog-id=7 op=LOAD Jul 15 11:19:02.282000 audit: BPF prog-id=8 op=LOAD Jul 15 11:19:02.283839 kernel: audit: type=1130 audit(1752578342.279:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:02.283859 kernel: audit: type=1334 audit(1752578342.282:10): prog-id=7 op=LOAD Jul 15 11:19:02.284137 systemd[1]: Starting systemd-udevd.service... Jul 15 11:19:02.298212 systemd-udevd[491]: Using default interface naming scheme 'v252'. Jul 15 11:19:02.301493 systemd[1]: Started systemd-udevd.service. Jul 15 11:19:02.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:02.304887 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:19:02.315139 dracut-pre-trigger[498]: rd.md=0: removing MD RAID activation Jul 15 11:19:02.339459 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:19:02.339000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:02.340893 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:19:02.373617 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:19:02.373000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:02.399877 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:19:02.404641 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:19:02.404656 kernel: GPT:9289727 != 19775487 Jul 15 11:19:02.404664 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:19:02.404679 kernel: GPT:9289727 != 19775487 Jul 15 11:19:02.404687 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:19:02.404695 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:19:02.413836 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (545) Jul 15 11:19:02.415294 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:19:02.416389 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:19:02.423287 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:19:02.426671 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:19:02.432764 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:19:02.436436 systemd[1]: Starting disk-uuid.service... Jul 15 11:19:02.442156 disk-uuid[562]: Primary Header is updated. Jul 15 11:19:02.442156 disk-uuid[562]: Secondary Entries is updated. Jul 15 11:19:02.442156 disk-uuid[562]: Secondary Header is updated. Jul 15 11:19:02.445309 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:19:03.455451 disk-uuid[563]: The operation has completed successfully. Jul 15 11:19:03.456517 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:19:03.477318 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:19:03.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.478000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.477418 systemd[1]: Finished disk-uuid.service. Jul 15 11:19:03.481475 systemd[1]: Starting verity-setup.service... Jul 15 11:19:03.499827 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 15 11:19:03.517450 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:19:03.519694 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:19:03.521350 systemd[1]: Finished verity-setup.service. Jul 15 11:19:03.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.568452 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:19:03.569725 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:19:03.569274 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:19:03.569939 systemd[1]: Starting ignition-setup.service... Jul 15 11:19:03.572356 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:19:03.578155 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 15 11:19:03.578193 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:19:03.578203 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:19:03.587505 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:19:03.593725 systemd[1]: Finished ignition-setup.service. Jul 15 11:19:03.593000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.595268 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:19:03.658401 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:19:03.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.659000 audit: BPF prog-id=9 op=LOAD Jul 15 11:19:03.660630 systemd[1]: Starting systemd-networkd.service... Jul 15 11:19:03.684260 systemd-networkd[739]: lo: Link UP Jul 15 11:19:03.684275 systemd-networkd[739]: lo: Gained carrier Jul 15 11:19:03.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.684689 systemd-networkd[739]: Enumeration completed Jul 15 11:19:03.684792 systemd[1]: Started systemd-networkd.service. Jul 15 11:19:03.684894 systemd-networkd[739]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:19:03.685955 systemd-networkd[739]: eth0: Link UP Jul 15 11:19:03.685958 systemd-networkd[739]: eth0: Gained carrier Jul 15 11:19:03.686157 systemd[1]: Reached target network.target. Jul 15 11:19:03.688389 systemd[1]: Starting iscsiuio.service... Jul 15 11:19:03.699729 systemd[1]: Started iscsiuio.service. Jul 15 11:19:03.700000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.701568 systemd[1]: Starting iscsid.service... Jul 15 11:19:03.704971 iscsid[744]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:19:03.704971 iscsid[744]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:19:03.704971 iscsid[744]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:19:03.704971 iscsid[744]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:19:03.704971 iscsid[744]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:19:03.712000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.713853 ignition[652]: Ignition 2.14.0 Jul 15 11:19:03.708919 systemd[1]: Started iscsid.service. Jul 15 11:19:03.719923 iscsid[744]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:19:03.713860 ignition[652]: Stage: fetch-offline Jul 15 11:19:03.711505 systemd-networkd[739]: eth0: DHCPv4 address 10.0.0.109/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:19:03.713897 ignition[652]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:19:03.714030 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:19:03.713906 ignition[652]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:19:03.725000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.724644 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:19:03.714032 ignition[652]: parsed url from cmdline: "" Jul 15 11:19:03.726433 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:19:03.714035 ignition[652]: no config URL provided Jul 15 11:19:03.728239 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:19:03.714039 ignition[652]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:19:03.729839 systemd[1]: Reached target remote-fs.target. Jul 15 11:19:03.714047 ignition[652]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:19:03.732171 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:19:03.714065 ignition[652]: op(1): [started] loading QEMU firmware config module Jul 15 11:19:03.714070 ignition[652]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:19:03.724146 ignition[652]: op(1): [finished] loading QEMU firmware config module Jul 15 11:19:03.724168 ignition[652]: QEMU firmware config was not found. Ignoring... Jul 15 11:19:03.740000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.739656 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:19:03.776121 ignition[652]: parsing config with SHA512: dd7eac2f520479602032e5daec6b4cf81388eee83bbadf5d9f3d732147da8ba5c914af3dab5aa8a9a998ed2862d5c0620588d7dba9ee1a8a4cae168abf04b2cd Jul 15 11:19:03.784694 unknown[652]: fetched base config from "system" Jul 15 11:19:03.784705 unknown[652]: fetched user config from "qemu" Jul 15 11:19:03.785312 ignition[652]: fetch-offline: fetch-offline passed Jul 15 11:19:03.787000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.785432 systemd-resolved[292]: Detected conflict on linux IN A 10.0.0.109 Jul 15 11:19:03.785551 ignition[652]: Ignition finished successfully Jul 15 11:19:03.785442 systemd-resolved[292]: Hostname conflict, changing published hostname from 'linux' to 'linux10'. Jul 15 11:19:03.786457 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:19:03.787506 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:19:03.788309 systemd[1]: Starting ignition-kargs.service... Jul 15 11:19:03.797414 ignition[761]: Ignition 2.14.0 Jul 15 11:19:03.797424 ignition[761]: Stage: kargs Jul 15 11:19:03.797521 ignition[761]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:19:03.797531 ignition[761]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:19:03.799883 systemd[1]: Finished ignition-kargs.service. Jul 15 11:19:03.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.798428 ignition[761]: kargs: kargs passed Jul 15 11:19:03.798468 ignition[761]: Ignition finished successfully Jul 15 11:19:03.802301 systemd[1]: Starting ignition-disks.service... Jul 15 11:19:03.808609 ignition[767]: Ignition 2.14.0 Jul 15 11:19:03.808619 ignition[767]: Stage: disks Jul 15 11:19:03.808725 ignition[767]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:19:03.810732 systemd[1]: Finished ignition-disks.service. Jul 15 11:19:03.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.808743 ignition[767]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:19:03.812353 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:19:03.809572 ignition[767]: disks: disks passed Jul 15 11:19:03.813704 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:19:03.809617 ignition[767]: Ignition finished successfully Jul 15 11:19:03.815429 systemd[1]: Reached target local-fs.target. Jul 15 11:19:03.816846 systemd[1]: Reached target sysinit.target. Jul 15 11:19:03.818082 systemd[1]: Reached target basic.target. Jul 15 11:19:03.820266 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:19:03.830683 systemd-fsck[775]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 15 11:19:03.833748 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:19:03.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.835887 systemd[1]: Mounting sysroot.mount... Jul 15 11:19:03.843827 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:19:03.844479 systemd[1]: Mounted sysroot.mount. Jul 15 11:19:03.845262 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:19:03.847436 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:19:03.848325 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:19:03.848367 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:19:03.848389 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:19:03.850259 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:19:03.852161 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:19:03.856326 initrd-setup-root[785]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:19:03.859629 initrd-setup-root[793]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:19:03.863920 initrd-setup-root[801]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:19:03.868000 initrd-setup-root[809]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:19:03.894719 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:19:03.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.896443 systemd[1]: Starting ignition-mount.service... Jul 15 11:19:03.897920 systemd[1]: Starting sysroot-boot.service... Jul 15 11:19:03.902651 bash[826]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:19:03.911463 ignition[828]: INFO : Ignition 2.14.0 Jul 15 11:19:03.913820 ignition[828]: INFO : Stage: mount Jul 15 11:19:03.913820 ignition[828]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:19:03.913820 ignition[828]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:19:03.913820 ignition[828]: INFO : mount: mount passed Jul 15 11:19:03.913820 ignition[828]: INFO : Ignition finished successfully Jul 15 11:19:03.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:03.914945 systemd[1]: Finished ignition-mount.service. Jul 15 11:19:03.921862 systemd[1]: Finished sysroot-boot.service. Jul 15 11:19:03.921000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:04.527612 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:19:04.533839 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (836) Jul 15 11:19:04.533867 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 15 11:19:04.535429 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:19:04.536044 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:19:04.538860 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:19:04.540393 systemd[1]: Starting ignition-files.service... Jul 15 11:19:04.553943 ignition[856]: INFO : Ignition 2.14.0 Jul 15 11:19:04.553943 ignition[856]: INFO : Stage: files Jul 15 11:19:04.555473 ignition[856]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:19:04.555473 ignition[856]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:19:04.555473 ignition[856]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:19:04.561185 ignition[856]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:19:04.561185 ignition[856]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:19:04.564090 ignition[856]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:19:04.564090 ignition[856]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:19:04.564090 ignition[856]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:19:04.563841 unknown[856]: wrote ssh authorized keys file for user: core Jul 15 11:19:04.569043 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 15 11:19:04.569043 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-arm64.tar.gz: attempt #1 Jul 15 11:19:04.600962 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:19:05.004468 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-arm64.tar.gz" Jul 15 11:19:05.004468 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 15 11:19:05.008042 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-arm64.raw: attempt #1 Jul 15 11:19:05.431915 systemd-networkd[739]: eth0: Gained IPv6LL Jul 15 11:19:05.624107 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:19:05.802615 ignition[856]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-arm64.raw" Jul 15 11:19:05.802615 ignition[856]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:19:05.806019 ignition[856]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:19:05.850680 ignition[856]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:19:05.852533 ignition[856]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:19:05.852533 ignition[856]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:19:05.852533 ignition[856]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:19:05.852533 ignition[856]: INFO : files: files passed Jul 15 11:19:05.852533 ignition[856]: INFO : Ignition finished successfully Jul 15 11:19:05.853000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.852138 systemd[1]: Finished ignition-files.service. Jul 15 11:19:05.860000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.854151 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:19:05.863000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.855549 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:19:05.866613 initrd-setup-root-after-ignition[880]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:19:05.856267 systemd[1]: Starting ignition-quench.service... Jul 15 11:19:05.869495 initrd-setup-root-after-ignition[883]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:19:05.860728 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:19:05.860828 systemd[1]: Finished ignition-quench.service. Jul 15 11:19:05.861950 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:19:05.863374 systemd[1]: Reached target ignition-complete.target. Jul 15 11:19:05.865610 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:19:05.878042 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:19:05.878135 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:19:05.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.879745 systemd[1]: Reached target initrd-fs.target. Jul 15 11:19:05.880983 systemd[1]: Reached target initrd.target. Jul 15 11:19:05.882238 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:19:05.882962 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:19:05.892898 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:19:05.892000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.894392 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:19:05.901870 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:19:05.902734 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:19:05.903670 systemd[1]: Stopped target timers.target. Jul 15 11:19:05.905000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.904934 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:19:05.905039 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:19:05.906440 systemd[1]: Stopped target initrd.target. Jul 15 11:19:05.907542 systemd[1]: Stopped target basic.target. Jul 15 11:19:05.908959 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:19:05.910305 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:19:05.911627 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:19:05.912942 systemd[1]: Stopped target remote-fs.target. Jul 15 11:19:05.914299 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:19:05.915654 systemd[1]: Stopped target sysinit.target. Jul 15 11:19:05.916980 systemd[1]: Stopped target local-fs.target. Jul 15 11:19:05.918230 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:19:05.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.919563 systemd[1]: Stopped target swap.target. Jul 15 11:19:05.920711 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:19:05.924000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.920836 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:19:05.925000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.922108 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:19:05.923294 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:19:05.923409 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:19:05.924632 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:19:05.924728 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:19:05.926188 systemd[1]: Stopped target paths.target. Jul 15 11:19:05.927304 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:19:05.930848 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:19:05.932141 systemd[1]: Stopped target slices.target. Jul 15 11:19:05.933330 systemd[1]: Stopped target sockets.target. Jul 15 11:19:05.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.934845 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:19:05.937000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.934920 systemd[1]: Closed iscsid.socket. Jul 15 11:19:05.936129 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:19:05.936228 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:19:05.937560 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:19:05.937655 systemd[1]: Stopped ignition-files.service. Jul 15 11:19:05.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.939517 systemd[1]: Stopping ignition-mount.service... Jul 15 11:19:05.946000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.940764 systemd[1]: Stopping iscsiuio.service... Jul 15 11:19:05.943319 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:19:05.944107 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:19:05.949000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.944267 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:19:05.952857 ignition[896]: INFO : Ignition 2.14.0 Jul 15 11:19:05.952857 ignition[896]: INFO : Stage: umount Jul 15 11:19:05.952857 ignition[896]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:19:05.952857 ignition[896]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:19:05.952857 ignition[896]: INFO : umount: umount passed Jul 15 11:19:05.952857 ignition[896]: INFO : Ignition finished successfully Jul 15 11:19:05.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.954000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.955000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.958000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.960000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.945794 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:19:05.961000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.945916 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:19:05.948533 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:19:05.948623 systemd[1]: Stopped iscsiuio.service. Jul 15 11:19:05.950316 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:19:05.950374 systemd[1]: Closed iscsiuio.socket. Jul 15 11:19:05.952892 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:19:05.953416 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:19:05.953493 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:19:05.954774 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:19:05.954886 systemd[1]: Stopped ignition-mount.service. Jul 15 11:19:05.956602 systemd[1]: Stopped target network.target. Jul 15 11:19:05.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.957430 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:19:05.975000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.957485 systemd[1]: Stopped ignition-disks.service. Jul 15 11:19:05.959136 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:19:05.959179 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:19:05.981000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:19:05.960443 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:19:05.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.960483 systemd[1]: Stopped ignition-setup.service. Jul 15 11:19:05.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.961938 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:19:05.984000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.963395 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:19:05.970858 systemd-networkd[739]: eth0: DHCPv6 lease lost Jul 15 11:19:05.973316 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:19:05.973472 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:19:05.992000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:19:05.975661 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:19:05.975748 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:19:05.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.977119 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:19:05.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.977155 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:19:05.997000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.979806 systemd[1]: Stopping network-cleanup.service... Jul 15 11:19:05.980499 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:19:05.980559 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:19:06.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.982724 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:19:06.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.982770 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:19:06.004000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.984845 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:19:06.005000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.984890 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:19:05.985889 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:19:06.008000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.990791 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:19:06.010000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.993530 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:19:06.012000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.993629 systemd[1]: Stopped network-cleanup.service. Jul 15 11:19:05.995713 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:19:06.021370 kernel: kauditd_printk_skb: 61 callbacks suppressed Jul 15 11:19:06.021392 kernel: audit: type=1130 audit(1752578346.014:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:06.021407 kernel: audit: type=1131 audit(1752578346.014:73): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:06.014000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:06.014000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:05.995798 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:19:05.996726 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:19:05.996868 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:19:05.998335 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:19:05.998366 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:19:05.999455 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:19:05.999489 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:19:06.000776 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:19:06.000832 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:19:06.002462 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:19:06.002501 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:19:06.003887 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:19:06.003932 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:19:06.005373 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:19:06.005425 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:19:06.007361 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:19:06.008244 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 15 11:19:06.008299 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 15 11:19:06.010352 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:19:06.010406 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:19:06.011209 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:19:06.011248 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:19:06.042633 iscsid[744]: iscsid shutting down. Jul 15 11:19:06.043308 systemd-journald[290]: Received SIGTERM from PID 1 (n/a). Jul 15 11:19:06.013712 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 15 11:19:06.014109 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:19:06.014184 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:19:06.015544 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:19:06.022824 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:19:06.028966 systemd[1]: Switching root. Jul 15 11:19:06.048603 systemd-journald[290]: Journal stopped Jul 15 11:19:08.031027 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:19:08.031081 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:19:08.031092 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:19:08.031102 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:19:08.031112 kernel: SELinux: policy capability open_perms=1 Jul 15 11:19:08.031122 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:19:08.031132 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:19:08.031142 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:19:08.031152 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:19:08.031161 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:19:08.031174 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:19:08.031184 kernel: audit: type=1403 audit(1752578346.102:74): auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:19:08.031195 systemd[1]: Successfully loaded SELinux policy in 33.668ms. Jul 15 11:19:08.031211 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.759ms. Jul 15 11:19:08.031223 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:19:08.031235 systemd[1]: Detected virtualization kvm. Jul 15 11:19:08.031246 systemd[1]: Detected architecture arm64. Jul 15 11:19:08.031258 systemd[1]: Detected first boot. Jul 15 11:19:08.031269 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:19:08.031280 kernel: audit: type=1400 audit(1752578346.176:75): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:19:08.031290 kernel: audit: type=1400 audit(1752578346.176:76): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:19:08.031301 kernel: audit: type=1334 audit(1752578346.178:77): prog-id=10 op=LOAD Jul 15 11:19:08.031311 kernel: audit: type=1334 audit(1752578346.178:78): prog-id=10 op=UNLOAD Jul 15 11:19:08.031325 kernel: audit: type=1334 audit(1752578346.180:79): prog-id=11 op=LOAD Jul 15 11:19:08.031337 kernel: audit: type=1334 audit(1752578346.180:80): prog-id=11 op=UNLOAD Jul 15 11:19:08.031348 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:19:08.031359 kernel: audit: type=1400 audit(1752578346.227:81): avc: denied { associate } for pid=929 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:19:08.031370 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:19:08.031381 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:19:08.031397 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:19:08.031411 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:19:08.031422 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:19:08.031432 systemd[1]: Stopped iscsid.service. Jul 15 11:19:08.031443 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:19:08.031457 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:19:08.031468 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:19:08.031479 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:19:08.031491 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:19:08.031502 systemd[1]: Created slice system-getty.slice. Jul 15 11:19:08.031513 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:19:08.031523 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:19:08.031534 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:19:08.031544 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:19:08.031555 systemd[1]: Created slice user.slice. Jul 15 11:19:08.031565 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:19:08.031578 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:19:08.031588 systemd[1]: Set up automount boot.automount. Jul 15 11:19:08.031599 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:19:08.031609 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:19:08.031620 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:19:08.031630 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:19:08.031641 systemd[1]: Reached target integritysetup.target. Jul 15 11:19:08.031651 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:19:08.031661 systemd[1]: Reached target remote-fs.target. Jul 15 11:19:08.031673 systemd[1]: Reached target slices.target. Jul 15 11:19:08.031683 systemd[1]: Reached target swap.target. Jul 15 11:19:08.031695 systemd[1]: Reached target torcx.target. Jul 15 11:19:08.031705 systemd[1]: Reached target veritysetup.target. Jul 15 11:19:08.031716 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:19:08.031726 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:19:08.031737 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:19:08.031748 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:19:08.031758 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:19:08.031768 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:19:08.031780 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:19:08.031790 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:19:08.031800 systemd[1]: Mounting media.mount... Jul 15 11:19:08.031823 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:19:08.031835 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:19:08.031845 systemd[1]: Mounting tmp.mount... Jul 15 11:19:08.031855 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:19:08.031866 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:19:08.031878 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:19:08.031889 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:19:08.031906 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:19:08.031916 systemd[1]: Starting modprobe@drm.service... Jul 15 11:19:08.031927 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:19:08.031937 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:19:08.031948 systemd[1]: Starting modprobe@loop.service... Jul 15 11:19:08.031958 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:19:08.031969 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:19:08.031980 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:19:08.031990 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:19:08.032001 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:19:08.032011 systemd[1]: Stopped systemd-journald.service. Jul 15 11:19:08.032022 kernel: fuse: init (API version 7.34) Jul 15 11:19:08.032034 systemd[1]: Starting systemd-journald.service... Jul 15 11:19:08.032047 kernel: loop: module loaded Jul 15 11:19:08.032057 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:19:08.032067 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:19:08.032078 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:19:08.032089 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:19:08.032099 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:19:08.032110 systemd[1]: Stopped verity-setup.service. Jul 15 11:19:08.032121 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:19:08.032131 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:19:08.032141 systemd[1]: Mounted media.mount. Jul 15 11:19:08.032152 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:19:08.032162 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:19:08.032173 systemd[1]: Mounted tmp.mount. Jul 15 11:19:08.032185 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:19:08.032196 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:19:08.032210 systemd-journald[991]: Journal started Jul 15 11:19:08.032247 systemd-journald[991]: Runtime Journal (/run/log/journal/7ee405d8e50047799c7c2440996de333) is 6.0M, max 48.7M, 42.6M free. Jul 15 11:19:06.102000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:19:06.176000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:19:06.176000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:19:06.178000 audit: BPF prog-id=10 op=LOAD Jul 15 11:19:06.178000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:19:06.180000 audit: BPF prog-id=11 op=LOAD Jul 15 11:19:06.180000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:19:06.227000 audit[929]: AVC avc: denied { associate } for pid=929 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:19:06.227000 audit[929]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd8a4 a1=4000150de0 a2=4000157040 a3=32 items=0 ppid=912 pid=929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:06.227000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:19:06.228000 audit[929]: AVC avc: denied { associate } for pid=929 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:19:06.228000 audit[929]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001cd979 a2=1ed a3=0 items=2 ppid=912 pid=929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:06.228000 audit: CWD cwd="/" Jul 15 11:19:06.228000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:19:06.228000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:19:06.228000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:19:07.892000 audit: BPF prog-id=12 op=LOAD Jul 15 11:19:07.892000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:19:07.892000 audit: BPF prog-id=13 op=LOAD Jul 15 11:19:07.892000 audit: BPF prog-id=14 op=LOAD Jul 15 11:19:07.892000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:19:07.892000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:19:07.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.899000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.912000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:19:07.992000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.994000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.995000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.998000 audit: BPF prog-id=15 op=LOAD Jul 15 11:19:07.998000 audit: BPF prog-id=16 op=LOAD Jul 15 11:19:07.998000 audit: BPF prog-id=17 op=LOAD Jul 15 11:19:07.998000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:19:07.998000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:19:08.018000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.029000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:19:08.029000 audit[991]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=3 a1=fffff9e0a0d0 a2=4000 a3=1 items=0 ppid=1 pid=991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:08.029000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:19:08.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.891231 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:19:06.225610 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:19:07.891242 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:19:06.226259 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:19:07.893794 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:19:06.226279 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:19:06.226311 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:19:06.226321 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:19:06.226351 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:19:06.226363 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:19:06.226570 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:19:06.226605 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:19:06.226616 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:19:06.227475 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:19:06.227510 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:19:06.227528 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:19:06.227542 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:19:06.227559 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:19:06.227572 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:06Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:19:07.658350 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:07Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:19:07.658610 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:07Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:19:08.035000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.035000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:07.658708 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:07Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:19:07.658889 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:07Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:19:07.658938 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:07Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:19:07.658992 /usr/lib/systemd/system-generators/torcx-generator[929]: time="2025-07-15T11:19:07Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:19:08.038456 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:19:08.038500 systemd[1]: Started systemd-journald.service. Jul 15 11:19:08.037000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.038736 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:19:08.038904 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:19:08.038000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.038000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.039915 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:19:08.040031 systemd[1]: Finished modprobe@drm.service. Jul 15 11:19:08.039000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.039000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.041131 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:19:08.041286 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:19:08.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.041000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.042455 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:19:08.042601 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:19:08.042000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.042000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.043661 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:19:08.044175 systemd[1]: Finished modprobe@loop.service. Jul 15 11:19:08.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.044000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.045339 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:19:08.045000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.046412 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:19:08.046000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.047606 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:19:08.047000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.048794 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:19:08.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.050143 systemd[1]: Reached target network-pre.target. Jul 15 11:19:08.052139 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:19:08.053926 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:19:08.054634 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:19:08.056138 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:19:08.057918 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:19:08.058768 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:19:08.059757 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:19:08.060617 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:19:08.061682 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:19:08.063638 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:19:08.065803 systemd-journald[991]: Time spent on flushing to /var/log/journal/7ee405d8e50047799c7c2440996de333 is 19.040ms for 991 entries. Jul 15 11:19:08.065803 systemd-journald[991]: System Journal (/var/log/journal/7ee405d8e50047799c7c2440996de333) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:19:08.102022 systemd-journald[991]: Received client request to flush runtime journal. Jul 15 11:19:08.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.067302 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:19:08.068654 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:19:08.102526 udevadm[1031]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 15 11:19:08.071042 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:19:08.072006 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:19:08.073120 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:19:08.075082 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:19:08.082468 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:19:08.088358 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:19:08.090166 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:19:08.102851 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:19:08.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.112479 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:19:08.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.421514 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:19:08.421000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.422000 audit: BPF prog-id=18 op=LOAD Jul 15 11:19:08.422000 audit: BPF prog-id=19 op=LOAD Jul 15 11:19:08.422000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:19:08.422000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:19:08.423764 systemd[1]: Starting systemd-udevd.service... Jul 15 11:19:08.441091 systemd-udevd[1035]: Using default interface naming scheme 'v252'. Jul 15 11:19:08.453964 systemd[1]: Started systemd-udevd.service. Jul 15 11:19:08.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.455000 audit: BPF prog-id=20 op=LOAD Jul 15 11:19:08.458319 systemd[1]: Starting systemd-networkd.service... Jul 15 11:19:08.472000 audit: BPF prog-id=21 op=LOAD Jul 15 11:19:08.472000 audit: BPF prog-id=22 op=LOAD Jul 15 11:19:08.472000 audit: BPF prog-id=23 op=LOAD Jul 15 11:19:08.473649 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:19:08.475655 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 15 11:19:08.523140 systemd[1]: Started systemd-userdbd.service. Jul 15 11:19:08.523000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.553729 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:19:08.563223 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:19:08.564000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.565354 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:19:08.581490 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:19:08.583540 systemd-networkd[1044]: lo: Link UP Jul 15 11:19:08.583548 systemd-networkd[1044]: lo: Gained carrier Jul 15 11:19:08.583955 systemd-networkd[1044]: Enumeration completed Jul 15 11:19:08.584060 systemd-networkd[1044]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:19:08.584064 systemd[1]: Started systemd-networkd.service. Jul 15 11:19:08.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.585912 systemd-networkd[1044]: eth0: Link UP Jul 15 11:19:08.585922 systemd-networkd[1044]: eth0: Gained carrier Jul 15 11:19:08.612921 systemd-networkd[1044]: eth0: DHCPv4 address 10.0.0.109/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:19:08.617636 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:19:08.617000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.618677 systemd[1]: Reached target cryptsetup.target. Jul 15 11:19:08.620706 systemd[1]: Starting lvm2-activation.service... Jul 15 11:19:08.624138 lvm[1069]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:19:08.659611 systemd[1]: Finished lvm2-activation.service. Jul 15 11:19:08.659000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.660599 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:19:08.661494 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:19:08.661527 systemd[1]: Reached target local-fs.target. Jul 15 11:19:08.662338 systemd[1]: Reached target machines.target. Jul 15 11:19:08.664380 systemd[1]: Starting ldconfig.service... Jul 15 11:19:08.665719 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:19:08.665818 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:08.667160 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:19:08.669245 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:19:08.671612 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:19:08.674152 systemd[1]: Starting systemd-sysext.service... Jul 15 11:19:08.675271 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1071 (bootctl) Jul 15 11:19:08.676572 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:19:08.682128 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:19:08.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.686043 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:19:08.689959 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:19:08.690141 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:19:08.709850 kernel: loop0: detected capacity change from 0 to 203944 Jul 15 11:19:08.790516 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:19:08.791268 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:19:08.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.796822 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:19:08.804961 systemd-fsck[1082]: fsck.fat 4.2 (2021-01-31) Jul 15 11:19:08.804961 systemd-fsck[1082]: /dev/vda1: 236 files, 117310/258078 clusters Jul 15 11:19:08.808477 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:19:08.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.811538 systemd[1]: Mounting boot.mount... Jul 15 11:19:08.817849 kernel: loop1: detected capacity change from 0 to 203944 Jul 15 11:19:08.819144 systemd[1]: Mounted boot.mount. Jul 15 11:19:08.824574 (sd-sysext)[1089]: Using extensions 'kubernetes'. Jul 15 11:19:08.825684 (sd-sysext)[1089]: Merged extensions into '/usr'. Jul 15 11:19:08.826000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.826167 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:19:08.846938 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:19:08.848512 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:19:08.850713 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:19:08.852982 systemd[1]: Starting modprobe@loop.service... Jul 15 11:19:08.853886 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:19:08.854051 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:08.855008 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:19:08.855179 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:19:08.855000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.856517 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:19:08.856657 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:19:08.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.858026 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:19:08.858173 systemd[1]: Finished modprobe@loop.service. Jul 15 11:19:08.858000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:08.859537 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:19:08.859676 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:19:08.900780 ldconfig[1070]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:19:08.903806 systemd[1]: Finished ldconfig.service. Jul 15 11:19:08.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.022929 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:19:09.027696 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:19:09.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.029525 systemd[1]: Finished systemd-sysext.service. Jul 15 11:19:09.031678 systemd[1]: Starting ensure-sysext.service... Jul 15 11:19:09.033400 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:19:09.037440 systemd[1]: Reloading. Jul 15 11:19:09.042340 systemd-tmpfiles[1096]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:19:09.043533 systemd-tmpfiles[1096]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:19:09.044887 systemd-tmpfiles[1096]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:19:09.072247 /usr/lib/systemd/system-generators/torcx-generator[1116]: time="2025-07-15T11:19:09Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:19:09.072279 /usr/lib/systemd/system-generators/torcx-generator[1116]: time="2025-07-15T11:19:09Z" level=info msg="torcx already run" Jul 15 11:19:09.135422 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:19:09.135441 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:19:09.150665 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:19:09.190000 audit: BPF prog-id=24 op=LOAD Jul 15 11:19:09.190000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:19:09.191000 audit: BPF prog-id=25 op=LOAD Jul 15 11:19:09.191000 audit: BPF prog-id=26 op=LOAD Jul 15 11:19:09.191000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:19:09.191000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:19:09.192000 audit: BPF prog-id=27 op=LOAD Jul 15 11:19:09.192000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:19:09.192000 audit: BPF prog-id=28 op=LOAD Jul 15 11:19:09.192000 audit: BPF prog-id=29 op=LOAD Jul 15 11:19:09.192000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:19:09.192000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:19:09.193000 audit: BPF prog-id=30 op=LOAD Jul 15 11:19:09.193000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:19:09.194000 audit: BPF prog-id=31 op=LOAD Jul 15 11:19:09.194000 audit: BPF prog-id=32 op=LOAD Jul 15 11:19:09.194000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:19:09.194000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:19:09.196662 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:19:09.197000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.201252 systemd[1]: Starting audit-rules.service... Jul 15 11:19:09.203255 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:19:09.205647 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:19:09.208000 audit: BPF prog-id=33 op=LOAD Jul 15 11:19:09.210370 systemd[1]: Starting systemd-resolved.service... Jul 15 11:19:09.212000 audit: BPF prog-id=34 op=LOAD Jul 15 11:19:09.213972 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:19:09.216206 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:19:09.220000 audit[1161]: SYSTEM_BOOT pid=1161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.222867 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:19:09.223000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.225696 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.227598 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:19:09.230345 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:19:09.232487 systemd[1]: Starting modprobe@loop.service... Jul 15 11:19:09.234028 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.234220 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:09.234366 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:19:09.235491 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:19:09.235618 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:19:09.235000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.235000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.236885 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:19:09.237002 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:19:09.237000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.237000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.238245 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:19:09.238362 systemd[1]: Finished modprobe@loop.service. Jul 15 11:19:09.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.239589 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:19:09.239699 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.241138 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:19:09.241000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.243312 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.244452 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:19:09.246243 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:19:09.248135 systemd[1]: Starting modprobe@loop.service... Jul 15 11:19:09.248939 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.249070 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:09.249163 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:19:09.248000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.250019 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:19:09.251336 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:19:09.251457 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:19:09.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.252638 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:19:09.252746 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:19:09.252000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.252000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.254127 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:19:09.254236 systemd[1]: Finished modprobe@loop.service. Jul 15 11:19:09.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.253000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.257416 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.260134 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:19:09.262134 systemd[1]: Starting modprobe@drm.service... Jul 15 11:19:09.265178 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:19:09.267121 systemd[1]: Starting modprobe@loop.service... Jul 15 11:19:09.268110 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.268255 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:09.269447 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:19:09.272099 systemd[1]: Starting systemd-update-done.service... Jul 15 11:19:09.273013 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:19:09.274511 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:19:09.274642 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:19:09.274000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.274000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.275988 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:19:09.276101 systemd[1]: Finished modprobe@drm.service. Jul 15 11:19:09.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.277247 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:19:09.277356 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:19:09.278000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.278000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.278634 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:19:09.278745 systemd[1]: Finished modprobe@loop.service. Jul 15 11:19:09.279969 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:19:09.280081 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.284246 systemd[1]: Finished ensure-sysext.service. Jul 15 11:19:09.286903 systemd-resolved[1159]: Positive Trust Anchors: Jul 15 11:19:09.286925 systemd-resolved[1159]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:19:09.286951 systemd-resolved[1159]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:19:09.287904 systemd[1]: Finished systemd-update-done.service. Jul 15 11:19:09.288000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.289112 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:19:09.289174 systemd-timesyncd[1160]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:19:09.289555 systemd-timesyncd[1160]: Initial clock synchronization to Tue 2025-07-15 11:19:09.191189 UTC. Jul 15 11:19:09.289000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:09.290431 systemd[1]: Reached target time-set.target. Jul 15 11:19:09.289000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:19:09.289000 audit[1188]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffdf140ff0 a2=420 a3=0 items=0 ppid=1155 pid=1188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:09.289000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:19:09.291054 augenrules[1188]: No rules Jul 15 11:19:09.291943 systemd[1]: Finished audit-rules.service. Jul 15 11:19:09.297539 systemd-resolved[1159]: Defaulting to hostname 'linux'. Jul 15 11:19:09.298899 systemd[1]: Started systemd-resolved.service. Jul 15 11:19:09.299735 systemd[1]: Reached target network.target. Jul 15 11:19:09.300639 systemd[1]: Reached target nss-lookup.target. Jul 15 11:19:09.301453 systemd[1]: Reached target sysinit.target. Jul 15 11:19:09.302295 systemd[1]: Started motdgen.path. Jul 15 11:19:09.303017 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:19:09.304274 systemd[1]: Started logrotate.timer. Jul 15 11:19:09.305106 systemd[1]: Started mdadm.timer. Jul 15 11:19:09.305762 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:19:09.306614 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:19:09.306646 systemd[1]: Reached target paths.target. Jul 15 11:19:09.307379 systemd[1]: Reached target timers.target. Jul 15 11:19:09.308474 systemd[1]: Listening on dbus.socket. Jul 15 11:19:09.310187 systemd[1]: Starting docker.socket... Jul 15 11:19:09.313302 systemd[1]: Listening on sshd.socket. Jul 15 11:19:09.314144 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:09.314586 systemd[1]: Listening on docker.socket. Jul 15 11:19:09.315442 systemd[1]: Reached target sockets.target. Jul 15 11:19:09.316268 systemd[1]: Reached target basic.target. Jul 15 11:19:09.317082 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.317115 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:19:09.318087 systemd[1]: Starting containerd.service... Jul 15 11:19:09.319759 systemd[1]: Starting dbus.service... Jul 15 11:19:09.321448 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:19:09.323470 systemd[1]: Starting extend-filesystems.service... Jul 15 11:19:09.324341 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:19:09.327087 systemd[1]: Starting motdgen.service... Jul 15 11:19:09.328919 systemd[1]: Starting prepare-helm.service... Jul 15 11:19:09.330853 jq[1197]: false Jul 15 11:19:09.331680 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:19:09.333779 systemd[1]: Starting sshd-keygen.service... Jul 15 11:19:09.336610 systemd[1]: Starting systemd-logind.service... Jul 15 11:19:09.337409 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:19:09.337481 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:19:09.337884 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:19:09.339321 systemd[1]: Starting update-engine.service... Jul 15 11:19:09.341050 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:19:09.343746 jq[1211]: true Jul 15 11:19:09.345555 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:19:09.345720 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:19:09.346686 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:19:09.346862 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:19:09.354604 jq[1218]: true Jul 15 11:19:09.363372 extend-filesystems[1198]: Found loop1 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda1 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda2 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda3 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found usr Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda4 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda6 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda7 Jul 15 11:19:09.364282 extend-filesystems[1198]: Found vda9 Jul 15 11:19:09.364282 extend-filesystems[1198]: Checking size of /dev/vda9 Jul 15 11:19:09.366700 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:19:09.366870 systemd[1]: Finished motdgen.service. Jul 15 11:19:09.382476 tar[1217]: linux-arm64/helm Jul 15 11:19:09.382779 extend-filesystems[1198]: Resized partition /dev/vda9 Jul 15 11:19:09.387626 extend-filesystems[1240]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:19:09.395518 dbus-daemon[1196]: [system] SELinux support is enabled Jul 15 11:19:09.396762 systemd[1]: Started dbus.service. Jul 15 11:19:09.399116 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:19:09.399152 systemd[1]: Reached target system-config.target. Jul 15 11:19:09.400060 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:19:09.400082 systemd[1]: Reached target user-config.target. Jul 15 11:19:09.414828 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:19:09.441763 update_engine[1210]: I0715 11:19:09.441407 1210 main.cc:92] Flatcar Update Engine starting Jul 15 11:19:09.443495 systemd-logind[1207]: Watching system buttons on /dev/input/event0 (Power Button) Jul 15 11:19:09.443677 systemd-logind[1207]: New seat seat0. Jul 15 11:19:09.448181 systemd[1]: Started systemd-logind.service. Jul 15 11:19:09.449562 systemd[1]: Started update-engine.service. Jul 15 11:19:09.449936 update_engine[1210]: I0715 11:19:09.449887 1210 update_check_scheduler.cc:74] Next update check in 2m32s Jul 15 11:19:09.452368 systemd[1]: Started locksmithd.service. Jul 15 11:19:09.460827 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:19:09.474249 extend-filesystems[1240]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:19:09.474249 extend-filesystems[1240]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:19:09.474249 extend-filesystems[1240]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:19:09.478065 extend-filesystems[1198]: Resized filesystem in /dev/vda9 Jul 15 11:19:09.477210 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:19:09.479663 env[1219]: time="2025-07-15T11:19:09.474477680Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:19:09.479866 bash[1247]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:19:09.477367 systemd[1]: Finished extend-filesystems.service. Jul 15 11:19:09.480292 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:19:09.493884 env[1219]: time="2025-07-15T11:19:09.493849000Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:19:09.494001 env[1219]: time="2025-07-15T11:19:09.493982120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:19:09.495847 env[1219]: time="2025-07-15T11:19:09.495802160Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:19:09.495847 env[1219]: time="2025-07-15T11:19:09.495844560Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496058 env[1219]: time="2025-07-15T11:19:09.496035720Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496058 env[1219]: time="2025-07-15T11:19:09.496056600Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496115 env[1219]: time="2025-07-15T11:19:09.496070640Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:19:09.496115 env[1219]: time="2025-07-15T11:19:09.496080200Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496172 env[1219]: time="2025-07-15T11:19:09.496155440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496486 env[1219]: time="2025-07-15T11:19:09.496464440Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496606 env[1219]: time="2025-07-15T11:19:09.496585040Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:19:09.496606 env[1219]: time="2025-07-15T11:19:09.496603280Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:19:09.496673 env[1219]: time="2025-07-15T11:19:09.496656280Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:19:09.496673 env[1219]: time="2025-07-15T11:19:09.496670560Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:19:09.500532 env[1219]: time="2025-07-15T11:19:09.500504960Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:19:09.500587 env[1219]: time="2025-07-15T11:19:09.500536640Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:19:09.500587 env[1219]: time="2025-07-15T11:19:09.500549240Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:19:09.500587 env[1219]: time="2025-07-15T11:19:09.500578800Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.500641 env[1219]: time="2025-07-15T11:19:09.500592280Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.500641 env[1219]: time="2025-07-15T11:19:09.500607000Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.500641 env[1219]: time="2025-07-15T11:19:09.500618720Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.500979 env[1219]: time="2025-07-15T11:19:09.500958920Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.501010 env[1219]: time="2025-07-15T11:19:09.500984120Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.501010 env[1219]: time="2025-07-15T11:19:09.501003120Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.501048 env[1219]: time="2025-07-15T11:19:09.501015040Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.501048 env[1219]: time="2025-07-15T11:19:09.501027440Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:19:09.501155 env[1219]: time="2025-07-15T11:19:09.501134640Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:19:09.501228 env[1219]: time="2025-07-15T11:19:09.501212480Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:19:09.501436 env[1219]: time="2025-07-15T11:19:09.501417600Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:19:09.501468 env[1219]: time="2025-07-15T11:19:09.501448960Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501468 env[1219]: time="2025-07-15T11:19:09.501464680Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:19:09.501580 env[1219]: time="2025-07-15T11:19:09.501564280Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501609 env[1219]: time="2025-07-15T11:19:09.501580680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501609 env[1219]: time="2025-07-15T11:19:09.501593640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501609 env[1219]: time="2025-07-15T11:19:09.501603880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501663 env[1219]: time="2025-07-15T11:19:09.501617120Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501663 env[1219]: time="2025-07-15T11:19:09.501628840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501663 env[1219]: time="2025-07-15T11:19:09.501639440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501663 env[1219]: time="2025-07-15T11:19:09.501650840Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501739 env[1219]: time="2025-07-15T11:19:09.501664480Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:19:09.501805 env[1219]: time="2025-07-15T11:19:09.501787640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501843 env[1219]: time="2025-07-15T11:19:09.501824880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501843 env[1219]: time="2025-07-15T11:19:09.501838640Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.501894 env[1219]: time="2025-07-15T11:19:09.501850080Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:19:09.501894 env[1219]: time="2025-07-15T11:19:09.501863600Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:19:09.501894 env[1219]: time="2025-07-15T11:19:09.501873880Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:19:09.501894 env[1219]: time="2025-07-15T11:19:09.501890320Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:19:09.501969 env[1219]: time="2025-07-15T11:19:09.501922160Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:19:09.502149 env[1219]: time="2025-07-15T11:19:09.502098960Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.502155880Z" level=info msg="Connect containerd service" Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.502187440Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.502745880Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.503099000Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.503133480Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.503174680Z" level=info msg="containerd successfully booted in 0.043131s" Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.503926440Z" level=info msg="Start subscribing containerd event" Jul 15 11:19:09.504536 env[1219]: time="2025-07-15T11:19:09.504471000Z" level=info msg="Start recovering state" Jul 15 11:19:09.503254 systemd[1]: Started containerd.service. Jul 15 11:19:09.504749 env[1219]: time="2025-07-15T11:19:09.504555160Z" level=info msg="Start event monitor" Jul 15 11:19:09.504749 env[1219]: time="2025-07-15T11:19:09.504576640Z" level=info msg="Start snapshots syncer" Jul 15 11:19:09.504749 env[1219]: time="2025-07-15T11:19:09.504590560Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:19:09.504749 env[1219]: time="2025-07-15T11:19:09.504600760Z" level=info msg="Start streaming server" Jul 15 11:19:09.532414 locksmithd[1248]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:19:09.772724 tar[1217]: linux-arm64/LICENSE Jul 15 11:19:09.772845 tar[1217]: linux-arm64/README.md Jul 15 11:19:09.777101 systemd[1]: Finished prepare-helm.service. Jul 15 11:19:10.294939 systemd-networkd[1044]: eth0: Gained IPv6LL Jul 15 11:19:10.296645 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:19:10.297878 systemd[1]: Reached target network-online.target. Jul 15 11:19:10.300187 systemd[1]: Starting kubelet.service... Jul 15 11:19:10.826835 sshd_keygen[1220]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:19:10.844719 systemd[1]: Finished sshd-keygen.service. Jul 15 11:19:10.847165 systemd[1]: Starting issuegen.service... Jul 15 11:19:10.852292 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:19:10.852446 systemd[1]: Finished issuegen.service. Jul 15 11:19:10.854612 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:19:10.860380 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:19:10.862534 systemd[1]: Started getty@tty1.service. Jul 15 11:19:10.864495 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 15 11:19:10.865613 systemd[1]: Reached target getty.target. Jul 15 11:19:10.887182 systemd[1]: Started kubelet.service. Jul 15 11:19:10.888364 systemd[1]: Reached target multi-user.target. Jul 15 11:19:10.890536 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:19:10.897438 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:19:10.897587 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:19:10.898662 systemd[1]: Startup finished in 589ms (kernel) + 4.493s (initrd) + 4.831s (userspace) = 9.914s. Jul 15 11:19:11.329034 kubelet[1278]: E0715 11:19:11.328987 1278 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:19:11.330826 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:19:11.330952 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:19:14.442574 systemd[1]: Created slice system-sshd.slice. Jul 15 11:19:14.443677 systemd[1]: Started sshd@0-10.0.0.109:22-10.0.0.1:33936.service. Jul 15 11:19:14.484721 sshd[1288]: Accepted publickey for core from 10.0.0.1 port 33936 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:14.486670 sshd[1288]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:14.498791 systemd[1]: Created slice user-500.slice. Jul 15 11:19:14.499884 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:19:14.501472 systemd-logind[1207]: New session 1 of user core. Jul 15 11:19:14.507661 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:19:14.509022 systemd[1]: Starting user@500.service... Jul 15 11:19:14.511707 (systemd)[1291]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:14.569099 systemd[1291]: Queued start job for default target default.target. Jul 15 11:19:14.569549 systemd[1291]: Reached target paths.target. Jul 15 11:19:14.569581 systemd[1291]: Reached target sockets.target. Jul 15 11:19:14.569592 systemd[1291]: Reached target timers.target. Jul 15 11:19:14.569602 systemd[1291]: Reached target basic.target. Jul 15 11:19:14.569639 systemd[1291]: Reached target default.target. Jul 15 11:19:14.569662 systemd[1291]: Startup finished in 52ms. Jul 15 11:19:14.569911 systemd[1]: Started user@500.service. Jul 15 11:19:14.570840 systemd[1]: Started session-1.scope. Jul 15 11:19:14.621863 systemd[1]: Started sshd@1-10.0.0.109:22-10.0.0.1:33942.service. Jul 15 11:19:14.671273 sshd[1300]: Accepted publickey for core from 10.0.0.1 port 33942 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:14.672363 sshd[1300]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:14.675762 systemd-logind[1207]: New session 2 of user core. Jul 15 11:19:14.676922 systemd[1]: Started session-2.scope. Jul 15 11:19:14.731128 sshd[1300]: pam_unix(sshd:session): session closed for user core Jul 15 11:19:14.735090 systemd[1]: Started sshd@2-10.0.0.109:22-10.0.0.1:33956.service. Jul 15 11:19:14.735660 systemd[1]: sshd@1-10.0.0.109:22-10.0.0.1:33942.service: Deactivated successfully. Jul 15 11:19:14.736364 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:19:14.736857 systemd-logind[1207]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:19:14.737545 systemd-logind[1207]: Removed session 2. Jul 15 11:19:14.771315 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 33956 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:14.772538 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:14.776175 systemd-logind[1207]: New session 3 of user core. Jul 15 11:19:14.777106 systemd[1]: Started session-3.scope. Jul 15 11:19:14.826875 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 15 11:19:14.829928 systemd[1]: Started sshd@3-10.0.0.109:22-10.0.0.1:33972.service. Jul 15 11:19:14.830431 systemd[1]: sshd@2-10.0.0.109:22-10.0.0.1:33956.service: Deactivated successfully. Jul 15 11:19:14.831129 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:19:14.831958 systemd-logind[1207]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:19:14.832794 systemd-logind[1207]: Removed session 3. Jul 15 11:19:14.864569 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 33972 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:14.865918 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:14.869659 systemd[1]: Started session-4.scope. Jul 15 11:19:14.869963 systemd-logind[1207]: New session 4 of user core. Jul 15 11:19:14.922398 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 15 11:19:14.926218 systemd[1]: sshd@3-10.0.0.109:22-10.0.0.1:33972.service: Deactivated successfully. Jul 15 11:19:14.926885 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:19:14.927357 systemd-logind[1207]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:19:14.928420 systemd[1]: Started sshd@4-10.0.0.109:22-10.0.0.1:33976.service. Jul 15 11:19:14.929085 systemd-logind[1207]: Removed session 4. Jul 15 11:19:14.963004 sshd[1318]: Accepted publickey for core from 10.0.0.1 port 33976 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:14.964079 sshd[1318]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:14.967158 systemd-logind[1207]: New session 5 of user core. Jul 15 11:19:14.967932 systemd[1]: Started session-5.scope. Jul 15 11:19:15.026662 sudo[1321]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:19:15.026923 sudo[1321]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:19:15.039971 dbus-daemon[1196]: avc: received setenforce notice (enforcing=1) Jul 15 11:19:15.040876 sudo[1321]: pam_unix(sudo:session): session closed for user root Jul 15 11:19:15.044571 sshd[1318]: pam_unix(sshd:session): session closed for user core Jul 15 11:19:15.047419 systemd[1]: sshd@4-10.0.0.109:22-10.0.0.1:33976.service: Deactivated successfully. Jul 15 11:19:15.048109 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:19:15.048636 systemd-logind[1207]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:19:15.049765 systemd[1]: Started sshd@5-10.0.0.109:22-10.0.0.1:33978.service. Jul 15 11:19:15.050460 systemd-logind[1207]: Removed session 5. Jul 15 11:19:15.085725 sshd[1325]: Accepted publickey for core from 10.0.0.1 port 33978 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:15.086922 sshd[1325]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:15.090135 systemd-logind[1207]: New session 6 of user core. Jul 15 11:19:15.090936 systemd[1]: Started session-6.scope. Jul 15 11:19:15.141531 sudo[1329]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:19:15.141746 sudo[1329]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:19:15.144139 sudo[1329]: pam_unix(sudo:session): session closed for user root Jul 15 11:19:15.148189 sudo[1328]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:19:15.148404 sudo[1328]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:19:15.156290 systemd[1]: Stopping audit-rules.service... Jul 15 11:19:15.155000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:19:15.157960 kernel: kauditd_printk_skb: 134 callbacks suppressed Jul 15 11:19:15.157991 kernel: audit: type=1305 audit(1752578355.155:205): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:19:15.158078 auditctl[1332]: No rules Jul 15 11:19:15.155000 audit[1332]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff3b06d00 a2=420 a3=0 items=0 ppid=1 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.159926 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:19:15.160073 systemd[1]: Stopped audit-rules.service. Jul 15 11:19:15.161453 systemd[1]: Starting audit-rules.service... Jul 15 11:19:15.163037 kernel: audit: type=1300 audit(1752578355.155:205): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=fffff3b06d00 a2=420 a3=0 items=0 ppid=1 pid=1332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.163100 kernel: audit: type=1327 audit(1752578355.155:205): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:19:15.155000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:19:15.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.166488 kernel: audit: type=1131 audit(1752578355.158:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.177081 augenrules[1349]: No rules Jul 15 11:19:15.177677 systemd[1]: Finished audit-rules.service. Jul 15 11:19:15.177000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.178778 sudo[1328]: pam_unix(sudo:session): session closed for user root Jul 15 11:19:15.178000 audit[1328]: USER_END pid=1328 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.180856 sshd[1325]: pam_unix(sshd:session): session closed for user core Jul 15 11:19:15.183135 systemd[1]: sshd@5-10.0.0.109:22-10.0.0.1:33978.service: Deactivated successfully. Jul 15 11:19:15.183493 kernel: audit: type=1130 audit(1752578355.177:207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.183522 kernel: audit: type=1106 audit(1752578355.178:208): pid=1328 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.183550 kernel: audit: type=1104 audit(1752578355.178:209): pid=1328 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.178000 audit[1328]: CRED_DISP pid=1328 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.183692 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:19:15.180000 audit[1325]: USER_END pid=1325 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.186512 systemd-logind[1207]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:19:15.187455 systemd[1]: Started sshd@6-10.0.0.109:22-10.0.0.1:33984.service. Jul 15 11:19:15.188401 systemd-logind[1207]: Removed session 6. Jul 15 11:19:15.189477 kernel: audit: type=1106 audit(1752578355.180:210): pid=1325 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.189515 kernel: audit: type=1104 audit(1752578355.181:211): pid=1325 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.181000 audit[1325]: CRED_DISP pid=1325 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.182000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.109:22-10.0.0.1:33978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.194702 kernel: audit: type=1131 audit(1752578355.182:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.109:22-10.0.0.1:33978 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.186000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.109:22-10.0.0.1:33984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.221000 audit[1355]: USER_ACCT pid=1355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.222169 sshd[1355]: Accepted publickey for core from 10.0.0.1 port 33984 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:19:15.222000 audit[1355]: CRED_ACQ pid=1355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.222000 audit[1355]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff034e860 a2=3 a3=1 items=0 ppid=1 pid=1355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.222000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:19:15.223157 sshd[1355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:19:15.226861 systemd[1]: Started session-7.scope. Jul 15 11:19:15.227369 systemd-logind[1207]: New session 7 of user core. Jul 15 11:19:15.230000 audit[1355]: USER_START pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.231000 audit[1357]: CRED_ACQ pid=1357 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:15.278557 sudo[1358]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:19:15.277000 audit[1358]: USER_ACCT pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.277000 audit[1358]: CRED_REFR pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.278771 sudo[1358]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:19:15.280000 audit[1358]: USER_START pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.338222 systemd[1]: Starting docker.service... Jul 15 11:19:15.421981 env[1370]: time="2025-07-15T11:19:15.421925868Z" level=info msg="Starting up" Jul 15 11:19:15.423615 env[1370]: time="2025-07-15T11:19:15.423572832Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:19:15.423615 env[1370]: time="2025-07-15T11:19:15.423596760Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:19:15.423615 env[1370]: time="2025-07-15T11:19:15.423616834Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:19:15.423716 env[1370]: time="2025-07-15T11:19:15.423627407Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:19:15.425564 env[1370]: time="2025-07-15T11:19:15.425538384Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:19:15.425564 env[1370]: time="2025-07-15T11:19:15.425560524Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:19:15.425672 env[1370]: time="2025-07-15T11:19:15.425574834Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:19:15.425672 env[1370]: time="2025-07-15T11:19:15.425583181Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:19:15.430322 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport1470790453-merged.mount: Deactivated successfully. Jul 15 11:19:15.701495 env[1370]: time="2025-07-15T11:19:15.701402863Z" level=info msg="Loading containers: start." Jul 15 11:19:15.748000 audit[1404]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.748000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffc27ad140 a2=0 a3=1 items=0 ppid=1370 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.748000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:19:15.752000 audit[1406]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.752000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=ffffd9174680 a2=0 a3=1 items=0 ppid=1370 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.752000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:19:15.754000 audit[1408]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.754000 audit[1408]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff169a580 a2=0 a3=1 items=0 ppid=1370 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.754000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:19:15.756000 audit[1410]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1410 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.756000 audit[1410]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffff1d8d990 a2=0 a3=1 items=0 ppid=1370 pid=1410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.756000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:19:15.758000 audit[1412]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.758000 audit[1412]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb8903e0 a2=0 a3=1 items=0 ppid=1370 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.758000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:19:15.782000 audit[1417]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.782000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff6924f20 a2=0 a3=1 items=0 ppid=1370 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.782000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:19:15.787000 audit[1419]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1419 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.787000 audit[1419]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffffe13e0b0 a2=0 a3=1 items=0 ppid=1370 pid=1419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.787000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:19:15.789000 audit[1421]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.789000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffe172ce90 a2=0 a3=1 items=0 ppid=1370 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.789000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:19:15.790000 audit[1423]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1423 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.790000 audit[1423]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=fffff16791d0 a2=0 a3=1 items=0 ppid=1370 pid=1423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.790000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:19:15.798000 audit[1427]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.798000 audit[1427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=ffffd6c838f0 a2=0 a3=1 items=0 ppid=1370 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.798000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:19:15.809000 audit[1428]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1428 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.809000 audit[1428]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffef3ad500 a2=0 a3=1 items=0 ppid=1370 pid=1428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.809000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:19:15.818905 kernel: Initializing XFRM netlink socket Jul 15 11:19:15.841441 env[1370]: time="2025-07-15T11:19:15.841400126Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:19:15.854000 audit[1436]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.854000 audit[1436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=fffff6377610 a2=0 a3=1 items=0 ppid=1370 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.854000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:19:15.870000 audit[1439]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1439 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.870000 audit[1439]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=ffffe878e900 a2=0 a3=1 items=0 ppid=1370 pid=1439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.870000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:19:15.873000 audit[1442]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.873000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff5cc1f60 a2=0 a3=1 items=0 ppid=1370 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.873000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:19:15.875000 audit[1444]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.875000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffff1cc5840 a2=0 a3=1 items=0 ppid=1370 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.875000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:19:15.877000 audit[1446]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1446 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.877000 audit[1446]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffe10f32a0 a2=0 a3=1 items=0 ppid=1370 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.877000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:19:15.879000 audit[1448]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1448 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.879000 audit[1448]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffd3da3ad0 a2=0 a3=1 items=0 ppid=1370 pid=1448 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.879000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:19:15.881000 audit[1450]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1450 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.881000 audit[1450]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=fffff23065a0 a2=0 a3=1 items=0 ppid=1370 pid=1450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.881000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:19:15.887000 audit[1453]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.887000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffc24b3a40 a2=0 a3=1 items=0 ppid=1370 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.887000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:19:15.891000 audit[1455]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1455 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.891000 audit[1455]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=ffffef79b620 a2=0 a3=1 items=0 ppid=1370 pid=1455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.891000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:19:15.893000 audit[1457]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.893000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffe07ce300 a2=0 a3=1 items=0 ppid=1370 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.893000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:19:15.895000 audit[1459]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1459 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.895000 audit[1459]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdfafaf70 a2=0 a3=1 items=0 ppid=1370 pid=1459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.895000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:19:15.896380 systemd-networkd[1044]: docker0: Link UP Jul 15 11:19:15.902000 audit[1463]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1463 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.902000 audit[1463]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc44bdf60 a2=0 a3=1 items=0 ppid=1370 pid=1463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.902000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:19:15.912000 audit[1464]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1464 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:15.912000 audit[1464]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe6d97d90 a2=0 a3=1 items=0 ppid=1370 pid=1464 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:15.912000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:19:15.913972 env[1370]: time="2025-07-15T11:19:15.913938148Z" level=info msg="Loading containers: done." Jul 15 11:19:15.929414 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2050105485-merged.mount: Deactivated successfully. Jul 15 11:19:15.933750 env[1370]: time="2025-07-15T11:19:15.933701591Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:19:15.933933 env[1370]: time="2025-07-15T11:19:15.933912420Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:19:15.934020 env[1370]: time="2025-07-15T11:19:15.934006427Z" level=info msg="Daemon has completed initialization" Jul 15 11:19:15.949011 systemd[1]: Started docker.service. Jul 15 11:19:15.947000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:15.958335 env[1370]: time="2025-07-15T11:19:15.958173035Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:19:16.632925 env[1219]: time="2025-07-15T11:19:16.632883318Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 15 11:19:17.227036 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1069090379.mount: Deactivated successfully. Jul 15 11:19:18.516541 env[1219]: time="2025-07-15T11:19:18.516489298Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:18.517854 env[1219]: time="2025-07-15T11:19:18.517825140Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:18.519338 env[1219]: time="2025-07-15T11:19:18.519309476Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:18.521081 env[1219]: time="2025-07-15T11:19:18.521053476Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:18.522623 env[1219]: time="2025-07-15T11:19:18.522592382Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:8907c2d36348551c1038e24ef688f6830681069380376707e55518007a20a86c\"" Jul 15 11:19:18.525704 env[1219]: time="2025-07-15T11:19:18.525645099Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 15 11:19:19.816654 env[1219]: time="2025-07-15T11:19:19.816600636Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:19.818192 env[1219]: time="2025-07-15T11:19:19.818162233Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:19.819696 env[1219]: time="2025-07-15T11:19:19.819667159Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:19.821399 env[1219]: time="2025-07-15T11:19:19.821367045Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:19.822252 env[1219]: time="2025-07-15T11:19:19.822224281Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:0f640d6889416d515a0ac4de1c26f4d80134c47641ff464abc831560a951175f\"" Jul 15 11:19:19.822738 env[1219]: time="2025-07-15T11:19:19.822708335Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 15 11:19:20.996584 env[1219]: time="2025-07-15T11:19:20.996533642Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:20.998366 env[1219]: time="2025-07-15T11:19:20.998336543Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:21.000021 env[1219]: time="2025-07-15T11:19:20.999991481Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:21.005610 env[1219]: time="2025-07-15T11:19:21.005571437Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:21.006492 env[1219]: time="2025-07-15T11:19:21.006464595Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:23d79b83d912e2633bcb4f9f7b8b46024893e11d492a4249d8f1f8c9a26b7b2c\"" Jul 15 11:19:21.007168 env[1219]: time="2025-07-15T11:19:21.007144914Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 15 11:19:21.581685 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:19:21.581000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:21.581911 systemd[1]: Stopped kubelet.service. Jul 15 11:19:21.583320 systemd[1]: Starting kubelet.service... Jul 15 11:19:21.585486 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:19:21.585565 kernel: audit: type=1130 audit(1752578361.581:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:21.581000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:21.592252 kernel: audit: type=1131 audit(1752578361.581:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:21.681732 systemd[1]: Started kubelet.service. Jul 15 11:19:21.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:21.684824 kernel: audit: type=1130 audit(1752578361.681:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:21.745409 kubelet[1505]: E0715 11:19:21.745367 1505 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:19:21.747914 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:19:21.748042 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:19:21.746000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:19:21.751830 kernel: audit: type=1131 audit(1752578361.746:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:19:22.079378 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount244445033.mount: Deactivated successfully. Jul 15 11:19:22.650855 env[1219]: time="2025-07-15T11:19:22.650788511Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:22.652495 env[1219]: time="2025-07-15T11:19:22.652465210Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:22.654188 env[1219]: time="2025-07-15T11:19:22.654163337Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:22.655559 env[1219]: time="2025-07-15T11:19:22.655516954Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:22.656066 env[1219]: time="2025-07-15T11:19:22.656040661Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:dde5ff0da443b455e81aefc7bf6a216fdd659d1cbe13b8e8ac8129c3ecd27f89\"" Jul 15 11:19:22.656621 env[1219]: time="2025-07-15T11:19:22.656590742Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:19:23.160773 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount226215205.mount: Deactivated successfully. Jul 15 11:19:24.004565 env[1219]: time="2025-07-15T11:19:24.004510124Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.006041 env[1219]: time="2025-07-15T11:19:24.006012046Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.008253 env[1219]: time="2025-07-15T11:19:24.008223428Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.010027 env[1219]: time="2025-07-15T11:19:24.009995719Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.010893 env[1219]: time="2025-07-15T11:19:24.010856053Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 15 11:19:24.012177 env[1219]: time="2025-07-15T11:19:24.012144938Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:19:24.430033 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount997398749.mount: Deactivated successfully. Jul 15 11:19:24.435067 env[1219]: time="2025-07-15T11:19:24.435019607Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.436829 env[1219]: time="2025-07-15T11:19:24.436780879Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.438312 env[1219]: time="2025-07-15T11:19:24.438274297Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.439938 env[1219]: time="2025-07-15T11:19:24.439530204Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:24.440181 env[1219]: time="2025-07-15T11:19:24.440141809Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 15 11:19:24.441252 env[1219]: time="2025-07-15T11:19:24.441216817Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 15 11:19:24.907918 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount783745758.mount: Deactivated successfully. Jul 15 11:19:26.827003 env[1219]: time="2025-07-15T11:19:26.826926073Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:26.829214 env[1219]: time="2025-07-15T11:19:26.829168031Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:26.831163 env[1219]: time="2025-07-15T11:19:26.831133029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:26.833127 env[1219]: time="2025-07-15T11:19:26.833099066Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:26.834091 env[1219]: time="2025-07-15T11:19:26.834060116Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:27e3830e1402783674d8b594038967deea9d51f0d91b34c93c8f39d2f68af7da\"" Jul 15 11:19:31.998773 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:19:31.998972 systemd[1]: Stopped kubelet.service. Jul 15 11:19:31.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.000357 systemd[1]: Starting kubelet.service... Jul 15 11:19:31.998000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.004254 kernel: audit: type=1130 audit(1752578371.998:251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.004318 kernel: audit: type=1131 audit(1752578371.998:252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.058219 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 15 11:19:32.058283 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 15 11:19:32.058467 systemd[1]: Stopped kubelet.service. Jul 15 11:19:32.057000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:19:32.060521 systemd[1]: Starting kubelet.service... Jul 15 11:19:32.061844 kernel: audit: type=1130 audit(1752578372.057:253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:19:32.081952 systemd[1]: Reloading. Jul 15 11:19:32.125193 /usr/lib/systemd/system-generators/torcx-generator[1563]: time="2025-07-15T11:19:32Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:19:32.125224 /usr/lib/systemd/system-generators/torcx-generator[1563]: time="2025-07-15T11:19:32Z" level=info msg="torcx already run" Jul 15 11:19:32.262028 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:19:32.262048 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:19:32.277159 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329849 kernel: audit: type=1400 audit(1752578372.324:254): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329914 kernel: audit: type=1400 audit(1752578372.324:255): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329936 kernel: audit: type=1400 audit(1752578372.324:256): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.334350 kernel: audit: type=1400 audit(1752578372.324:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.334385 kernel: audit: type=1400 audit(1752578372.324:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338902 kernel: audit: type=1400 audit(1752578372.324:259): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338941 kernel: audit: type=1400 audit(1752578372.324:260): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.324000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit: BPF prog-id=40 op=LOAD Jul 15 11:19:32.327000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit: BPF prog-id=41 op=LOAD Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.329000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit: BPF prog-id=42 op=LOAD Jul 15 11:19:32.331000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:19:32.331000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.331000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit: BPF prog-id=43 op=LOAD Jul 15 11:19:32.333000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.333000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit: BPF prog-id=44 op=LOAD Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.336000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338000 audit: BPF prog-id=45 op=LOAD Jul 15 11:19:32.338000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:19:32.338000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:19:32.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.338000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit: BPF prog-id=46 op=LOAD Jul 15 11:19:32.340000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit: BPF prog-id=47 op=LOAD Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.340000 audit: BPF prog-id=48 op=LOAD Jul 15 11:19:32.340000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:19:32.340000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.341000 audit: BPF prog-id=49 op=LOAD Jul 15 11:19:32.341000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:19:32.341000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit: BPF prog-id=50 op=LOAD Jul 15 11:19:32.342000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit: BPF prog-id=51 op=LOAD Jul 15 11:19:32.342000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.342000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit: BPF prog-id=52 op=LOAD Jul 15 11:19:32.343000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit: BPF prog-id=53 op=LOAD Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:32.343000 audit: BPF prog-id=54 op=LOAD Jul 15 11:19:32.343000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:19:32.343000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:19:32.359610 systemd[1]: Started kubelet.service. Jul 15 11:19:32.359000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.361652 systemd[1]: Stopping kubelet.service... Jul 15 11:19:32.362179 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:19:32.362366 systemd[1]: Stopped kubelet.service. Jul 15 11:19:32.361000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.364215 systemd[1]: Starting kubelet.service... Jul 15 11:19:32.456449 systemd[1]: Started kubelet.service. Jul 15 11:19:32.456000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:32.500227 kubelet[1609]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:19:32.500543 kubelet[1609]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:19:32.500588 kubelet[1609]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:19:32.500724 kubelet[1609]: I0715 11:19:32.500693 1609 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:19:33.340840 kubelet[1609]: I0715 11:19:33.340797 1609 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:19:33.341010 kubelet[1609]: I0715 11:19:33.340999 1609 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:19:33.341315 kubelet[1609]: I0715 11:19:33.341300 1609 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:19:33.401234 kubelet[1609]: E0715 11:19:33.401194 1609 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.109:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:33.402267 kubelet[1609]: I0715 11:19:33.402246 1609 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:19:33.410420 kubelet[1609]: E0715 11:19:33.410388 1609 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:19:33.410420 kubelet[1609]: I0715 11:19:33.410415 1609 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:19:33.414592 kubelet[1609]: I0715 11:19:33.414568 1609 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:19:33.415499 kubelet[1609]: I0715 11:19:33.415468 1609 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:19:33.415648 kubelet[1609]: I0715 11:19:33.415622 1609 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:19:33.415800 kubelet[1609]: I0715 11:19:33.415650 1609 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:19:33.415888 kubelet[1609]: I0715 11:19:33.415827 1609 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:19:33.415888 kubelet[1609]: I0715 11:19:33.415838 1609 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:19:33.416073 kubelet[1609]: I0715 11:19:33.416060 1609 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:19:33.423685 kubelet[1609]: I0715 11:19:33.423660 1609 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:19:33.423756 kubelet[1609]: I0715 11:19:33.423690 1609 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:19:33.423756 kubelet[1609]: I0715 11:19:33.423717 1609 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:19:33.423829 kubelet[1609]: I0715 11:19:33.423793 1609 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:19:33.424519 kubelet[1609]: W0715 11:19:33.424467 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.109:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:33.424575 kubelet[1609]: E0715 11:19:33.424524 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.109:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:33.428865 kubelet[1609]: W0715 11:19:33.428805 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:33.428930 kubelet[1609]: E0715 11:19:33.428872 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:33.437087 kubelet[1609]: I0715 11:19:33.436552 1609 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:19:33.437502 kubelet[1609]: I0715 11:19:33.437475 1609 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:19:33.437826 kubelet[1609]: W0715 11:19:33.437783 1609 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:19:33.438786 kubelet[1609]: I0715 11:19:33.438766 1609 server.go:1274] "Started kubelet" Jul 15 11:19:33.439339 kubelet[1609]: I0715 11:19:33.439298 1609 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:19:33.439622 kubelet[1609]: I0715 11:19:33.439601 1609 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:19:33.439679 kubelet[1609]: I0715 11:19:33.439659 1609 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:19:33.439000 audit[1609]: AVC avc: denied { mac_admin } for pid=1609 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:33.439000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:19:33.439000 audit[1609]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40008a7a10 a1=4000bdb608 a2=40008a79e0 a3=25 items=0 ppid=1 pid=1609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.439000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:19:33.439000 audit[1609]: AVC avc: denied { mac_admin } for pid=1609 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:33.439000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:19:33.439000 audit[1609]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40006fcfc0 a1=4000bdb620 a2=40008a7aa0 a3=25 items=0 ppid=1 pid=1609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.439000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:19:33.440672 kubelet[1609]: I0715 11:19:33.440411 1609 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:19:33.440672 kubelet[1609]: I0715 11:19:33.440461 1609 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:19:33.440672 kubelet[1609]: I0715 11:19:33.440519 1609 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:19:33.440751 kubelet[1609]: I0715 11:19:33.440690 1609 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:19:33.442939 kubelet[1609]: I0715 11:19:33.442914 1609 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:19:33.443449 kubelet[1609]: E0715 11:19:33.442137 1609 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.109:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.109:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185268bebdd91cf2 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:19:33.438741746 +0000 UTC m=+0.977822233,LastTimestamp:2025-07-15 11:19:33.438741746 +0000 UTC m=+0.977822233,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:19:33.443722 kubelet[1609]: I0715 11:19:33.443709 1609 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:19:33.443909 kubelet[1609]: E0715 11:19:33.443882 1609 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:19:33.443909 kubelet[1609]: I0715 11:19:33.443889 1609 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:19:33.443000 audit[1622]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1622 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.443000 audit[1622]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffe15c27e0 a2=0 a3=1 items=0 ppid=1609 pid=1622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.443000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:19:33.444292 kubelet[1609]: I0715 11:19:33.444279 1609 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:19:33.444455 kubelet[1609]: W0715 11:19:33.444403 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:33.444455 kubelet[1609]: E0715 11:19:33.444451 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:33.444620 kubelet[1609]: E0715 11:19:33.444597 1609 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:19:33.444000 audit[1623]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1623 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.444000 audit[1623]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffeb4ff360 a2=0 a3=1 items=0 ppid=1609 pid=1623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.444000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:19:33.447589 kubelet[1609]: I0715 11:19:33.447566 1609 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:19:33.447589 kubelet[1609]: I0715 11:19:33.447586 1609 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:19:33.447688 kubelet[1609]: I0715 11:19:33.447657 1609 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:19:33.447763 kubelet[1609]: E0715 11:19:33.447741 1609 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.109:6443: connect: connection refused" interval="200ms" Jul 15 11:19:33.450000 audit[1625]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.450000 audit[1625]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=fffff7740f50 a2=0 a3=1 items=0 ppid=1609 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.450000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:19:33.452000 audit[1627]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.452000 audit[1627]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffdd911fa0 a2=0 a3=1 items=0 ppid=1609 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.452000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:19:33.460506 kubelet[1609]: I0715 11:19:33.460488 1609 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:19:33.460506 kubelet[1609]: I0715 11:19:33.460504 1609 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:19:33.459000 audit[1636]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.459000 audit[1636]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffeeda5860 a2=0 a3=1 items=0 ppid=1609 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.459000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:19:33.460712 kubelet[1609]: I0715 11:19:33.460521 1609 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:19:33.460712 kubelet[1609]: I0715 11:19:33.460645 1609 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:19:33.460000 audit[1637]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:33.460000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffebe29c80 a2=0 a3=1 items=0 ppid=1609 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.460000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:19:33.461586 kubelet[1609]: I0715 11:19:33.461570 1609 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:19:33.461655 kubelet[1609]: I0715 11:19:33.461646 1609 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:19:33.461800 kubelet[1609]: I0715 11:19:33.461791 1609 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:19:33.461943 kubelet[1609]: E0715 11:19:33.461927 1609 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:19:33.461000 audit[1639]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:33.461000 audit[1639]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff222c7f0 a2=0 a3=1 items=0 ppid=1609 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.461000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:19:33.461000 audit[1638]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.461000 audit[1638]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd062a3e0 a2=0 a3=1 items=0 ppid=1609 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.461000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:19:33.463000 audit[1640]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.463000 audit[1640]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd4c3b260 a2=0 a3=1 items=0 ppid=1609 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:19:33.464780 kubelet[1609]: W0715 11:19:33.464734 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:33.464000 audit[1641]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:33.464000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffefdca2e0 a2=0 a3=1 items=0 ppid=1609 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.464000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:19:33.464000 audit[1642]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:33.464000 audit[1642]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=ffffc973d5f0 a2=0 a3=1 items=0 ppid=1609 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.464000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:19:33.465177 kubelet[1609]: E0715 11:19:33.464927 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:33.465000 audit[1643]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1643 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:33.465000 audit[1643]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffff0ab3dd0 a2=0 a3=1 items=0 ppid=1609 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.465000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:19:33.545210 kubelet[1609]: E0715 11:19:33.545155 1609 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:19:33.562039 kubelet[1609]: I0715 11:19:33.562012 1609 policy_none.go:49] "None policy: Start" Jul 15 11:19:33.562187 kubelet[1609]: E0715 11:19:33.562144 1609 kubelet.go:2345] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 15 11:19:33.562767 kubelet[1609]: I0715 11:19:33.562748 1609 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:19:33.562830 kubelet[1609]: I0715 11:19:33.562779 1609 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:19:33.568515 systemd[1]: Created slice kubepods.slice. Jul 15 11:19:33.572091 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:19:33.589733 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:19:33.590000 audit[1609]: AVC avc: denied { mac_admin } for pid=1609 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:33.590000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:19:33.591079 kubelet[1609]: I0715 11:19:33.590864 1609 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:19:33.591878 kubelet[1609]: I0715 11:19:33.591858 1609 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:19:33.592142 kubelet[1609]: I0715 11:19:33.592129 1609 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:19:33.592937 kubelet[1609]: I0715 11:19:33.592372 1609 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:19:33.590000 audit[1609]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bf2ab0 a1=4000bac6a8 a2=4000bf2a80 a3=25 items=0 ppid=1 pid=1609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:33.590000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:19:33.593873 kubelet[1609]: I0715 11:19:33.593778 1609 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:19:33.594644 kubelet[1609]: E0715 11:19:33.594624 1609 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:19:33.648713 kubelet[1609]: E0715 11:19:33.648667 1609 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.109:6443: connect: connection refused" interval="400ms" Jul 15 11:19:33.694678 kubelet[1609]: I0715 11:19:33.694650 1609 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:19:33.697114 kubelet[1609]: E0715 11:19:33.697087 1609 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.109:6443/api/v1/nodes\": dial tcp 10.0.0.109:6443: connect: connection refused" node="localhost" Jul 15 11:19:33.769173 systemd[1]: Created slice kubepods-burstable-pod1c73fad9180f828c89c8bbb59bb452cd.slice. Jul 15 11:19:33.785744 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 15 11:19:33.803477 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 15 11:19:33.847100 kubelet[1609]: I0715 11:19:33.847015 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:33.847100 kubelet[1609]: I0715 11:19:33.847058 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:33.847100 kubelet[1609]: I0715 11:19:33.847077 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:19:33.847100 kubelet[1609]: I0715 11:19:33.847091 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1c73fad9180f828c89c8bbb59bb452cd-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c73fad9180f828c89c8bbb59bb452cd\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:33.847232 kubelet[1609]: I0715 11:19:33.847106 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1c73fad9180f828c89c8bbb59bb452cd-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c73fad9180f828c89c8bbb59bb452cd\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:33.847232 kubelet[1609]: I0715 11:19:33.847119 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:33.847232 kubelet[1609]: I0715 11:19:33.847134 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:33.847232 kubelet[1609]: I0715 11:19:33.847150 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1c73fad9180f828c89c8bbb59bb452cd-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1c73fad9180f828c89c8bbb59bb452cd\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:33.847232 kubelet[1609]: I0715 11:19:33.847164 1609 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:33.898992 kubelet[1609]: I0715 11:19:33.898964 1609 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:19:33.899254 kubelet[1609]: E0715 11:19:33.899230 1609 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.109:6443/api/v1/nodes\": dial tcp 10.0.0.109:6443: connect: connection refused" node="localhost" Jul 15 11:19:34.050090 kubelet[1609]: E0715 11:19:34.050055 1609 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.109:6443: connect: connection refused" interval="800ms" Jul 15 11:19:34.085238 kubelet[1609]: E0715 11:19:34.085221 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:34.085836 env[1219]: time="2025-07-15T11:19:34.085784809Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1c73fad9180f828c89c8bbb59bb452cd,Namespace:kube-system,Attempt:0,}" Jul 15 11:19:34.103005 kubelet[1609]: E0715 11:19:34.102946 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:34.103447 env[1219]: time="2025-07-15T11:19:34.103398066Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 15 11:19:34.105729 kubelet[1609]: E0715 11:19:34.105690 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:34.106055 env[1219]: time="2025-07-15T11:19:34.106024962Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 15 11:19:34.300352 kubelet[1609]: I0715 11:19:34.300317 1609 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:19:34.300640 kubelet[1609]: E0715 11:19:34.300600 1609 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://10.0.0.109:6443/api/v1/nodes\": dial tcp 10.0.0.109:6443: connect: connection refused" node="localhost" Jul 15 11:19:34.302107 kubelet[1609]: W0715 11:19:34.302062 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:34.302143 kubelet[1609]: E0715 11:19:34.302117 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.109:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:34.530650 kubelet[1609]: W0715 11:19:34.530479 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:34.530650 kubelet[1609]: E0715 11:19:34.530556 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.109:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:34.631225 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount333218465.mount: Deactivated successfully. Jul 15 11:19:34.635133 env[1219]: time="2025-07-15T11:19:34.635088330Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.637950 env[1219]: time="2025-07-15T11:19:34.637923043Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.639924 env[1219]: time="2025-07-15T11:19:34.639893825Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.641030 env[1219]: time="2025-07-15T11:19:34.641005793Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.643550 env[1219]: time="2025-07-15T11:19:34.643516546Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.645136 env[1219]: time="2025-07-15T11:19:34.645110515Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.645911 env[1219]: time="2025-07-15T11:19:34.645885091Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.647032 env[1219]: time="2025-07-15T11:19:34.647005774Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.650273 env[1219]: time="2025-07-15T11:19:34.650247445Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.653039 env[1219]: time="2025-07-15T11:19:34.653012073Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.654543 env[1219]: time="2025-07-15T11:19:34.654513048Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.655407 env[1219]: time="2025-07-15T11:19:34.655347074Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:34.671284 kubelet[1609]: W0715 11:19:34.671205 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.109:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:34.671543 kubelet[1609]: E0715 11:19:34.671286 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.109:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:34.686443 env[1219]: time="2025-07-15T11:19:34.686370313Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:34.686538 env[1219]: time="2025-07-15T11:19:34.686455391Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:34.686538 env[1219]: time="2025-07-15T11:19:34.686481538Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:34.686752 env[1219]: time="2025-07-15T11:19:34.686710425Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/45fc3c3766f5865e6a894a3af8c3681c9b0dda8abf46f389537d312b870a1915 pid=1668 runtime=io.containerd.runc.v2 Jul 15 11:19:34.687054 env[1219]: time="2025-07-15T11:19:34.686997362Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:34.687124 env[1219]: time="2025-07-15T11:19:34.687061290Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:34.687124 env[1219]: time="2025-07-15T11:19:34.687087238Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:34.687579 env[1219]: time="2025-07-15T11:19:34.687500113Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:34.687579 env[1219]: time="2025-07-15T11:19:34.687552607Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:34.687707 env[1219]: time="2025-07-15T11:19:34.687675266Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bf5a6c3bf049f0754b0979f510ce6ed0b6ea65c3d5cae5ac491b04792a6d29c2 pid=1669 runtime=io.containerd.runc.v2 Jul 15 11:19:34.687707 env[1219]: time="2025-07-15T11:19:34.687563121Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:34.688002 env[1219]: time="2025-07-15T11:19:34.687964002Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2b72466cb793ecad8abe098c0f1acf7d3929703a911f0a34adb6ec38cdf89d96 pid=1667 runtime=io.containerd.runc.v2 Jul 15 11:19:34.697309 kubelet[1609]: W0715 11:19:34.697233 1609 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.109:6443: connect: connection refused Jul 15 11:19:34.697309 kubelet[1609]: E0715 11:19:34.697279 1609 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.109:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.109:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:19:34.699042 systemd[1]: Started cri-containerd-45fc3c3766f5865e6a894a3af8c3681c9b0dda8abf46f389537d312b870a1915.scope. Jul 15 11:19:34.702925 systemd[1]: Started cri-containerd-bf5a6c3bf049f0754b0979f510ce6ed0b6ea65c3d5cae5ac491b04792a6d29c2.scope. Jul 15 11:19:34.723264 systemd[1]: Started cri-containerd-2b72466cb793ecad8abe098c0f1acf7d3929703a911f0a34adb6ec38cdf89d96.scope. Jul 15 11:19:34.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.730000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.730000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.731000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.731000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.731000 audit: BPF prog-id=55 op=LOAD Jul 15 11:19:34.732000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.732000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=1668 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666333633337363666353836356536613839346133616638633336 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=1668 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666333633337363666353836356536613839346133616638633336 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit: BPF prog-id=56 op=LOAD Jul 15 11:19:34.733000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=1668 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666333633337363666353836356536613839346133616638633336 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.733000 audit: BPF prog-id=57 op=LOAD Jul 15 11:19:34.733000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=1668 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.733000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666333633337363666353836356536613839346133616638633336 Jul 15 11:19:34.734000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:19:34.734000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.734000 audit: BPF prog-id=58 op=LOAD Jul 15 11:19:34.734000 audit[1698]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=1668 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435666333633337363666353836356536613839346133616638633336 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.741000 audit: BPF prog-id=59 op=LOAD Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000147b38 a2=10 a3=0 items=0 ppid=1669 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356136633362663034396630373534623039373966353130636536 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001475a0 a2=3c a3=0 items=0 ppid=1669 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356136633362663034396630373534623039373966353130636536 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.742000 audit: BPF prog-id=60 op=LOAD Jul 15 11:19:34.742000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001478e0 a2=78 a3=0 items=0 ppid=1669 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.742000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356136633362663034396630373534623039373966353130636536 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit: BPF prog-id=61 op=LOAD Jul 15 11:19:34.743000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000147670 a2=78 a3=0 items=0 ppid=1669 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356136633362663034396630373534623039373966353130636536 Jul 15 11:19:34.743000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:19:34.743000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { perfmon } for pid=1695 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit[1695]: AVC avc: denied { bpf } for pid=1695 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.743000 audit: BPF prog-id=62 op=LOAD Jul 15 11:19:34.743000 audit[1695]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000147b40 a2=78 a3=0 items=0 ppid=1669 pid=1695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.743000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6266356136633362663034396630373534623039373966353130636536 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit: BPF prog-id=63 op=LOAD Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262373234363663623739336563616438616265303938633066316163 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262373234363663623739336563616438616265303938633066316163 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.745000 audit: BPF prog-id=64 op=LOAD Jul 15 11:19:34.745000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.745000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262373234363663623739336563616438616265303938633066316163 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit: BPF prog-id=65 op=LOAD Jul 15 11:19:34.746000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262373234363663623739336563616438616265303938633066316163 Jul 15 11:19:34.746000 audit: BPF prog-id=65 op=UNLOAD Jul 15 11:19:34.746000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { perfmon } for pid=1699 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit[1699]: AVC avc: denied { bpf } for pid=1699 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.746000 audit: BPF prog-id=66 op=LOAD Jul 15 11:19:34.746000 audit[1699]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1667 pid=1699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3262373234363663623739336563616438616265303938633066316163 Jul 15 11:19:34.755910 env[1219]: time="2025-07-15T11:19:34.755873452Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"45fc3c3766f5865e6a894a3af8c3681c9b0dda8abf46f389537d312b870a1915\"" Jul 15 11:19:34.756709 kubelet[1609]: E0715 11:19:34.756672 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:34.759146 env[1219]: time="2025-07-15T11:19:34.759112764Z" level=info msg="CreateContainer within sandbox \"45fc3c3766f5865e6a894a3af8c3681c9b0dda8abf46f389537d312b870a1915\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:19:34.770118 env[1219]: time="2025-07-15T11:19:34.770089395Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"bf5a6c3bf049f0754b0979f510ce6ed0b6ea65c3d5cae5ac491b04792a6d29c2\"" Jul 15 11:19:34.771018 env[1219]: time="2025-07-15T11:19:34.770987269Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:1c73fad9180f828c89c8bbb59bb452cd,Namespace:kube-system,Attempt:0,} returns sandbox id \"2b72466cb793ecad8abe098c0f1acf7d3929703a911f0a34adb6ec38cdf89d96\"" Jul 15 11:19:34.771304 kubelet[1609]: E0715 11:19:34.771286 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:34.771573 kubelet[1609]: E0715 11:19:34.771554 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:34.772728 env[1219]: time="2025-07-15T11:19:34.772691903Z" level=info msg="CreateContainer within sandbox \"45fc3c3766f5865e6a894a3af8c3681c9b0dda8abf46f389537d312b870a1915\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ba9af6fa4cd87bd2153c5bbdf9b06b9f0f3b536bb5ec6f3f0bc1950153a440c6\"" Jul 15 11:19:34.772938 env[1219]: time="2025-07-15T11:19:34.772915792Z" level=info msg="CreateContainer within sandbox \"bf5a6c3bf049f0754b0979f510ce6ed0b6ea65c3d5cae5ac491b04792a6d29c2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:19:34.773025 env[1219]: time="2025-07-15T11:19:34.773002109Z" level=info msg="CreateContainer within sandbox \"2b72466cb793ecad8abe098c0f1acf7d3929703a911f0a34adb6ec38cdf89d96\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:19:34.773244 env[1219]: time="2025-07-15T11:19:34.773224678Z" level=info msg="StartContainer for \"ba9af6fa4cd87bd2153c5bbdf9b06b9f0f3b536bb5ec6f3f0bc1950153a440c6\"" Jul 15 11:19:34.792921 env[1219]: time="2025-07-15T11:19:34.791931232Z" level=info msg="CreateContainer within sandbox \"bf5a6c3bf049f0754b0979f510ce6ed0b6ea65c3d5cae5ac491b04792a6d29c2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"412ba51d50e3a52cd8db4d861b04517510de2689677b9e3b1d48fd883c095b75\"" Jul 15 11:19:34.792700 systemd[1]: Started cri-containerd-ba9af6fa4cd87bd2153c5bbdf9b06b9f0f3b536bb5ec6f3f0bc1950153a440c6.scope. Jul 15 11:19:34.793401 env[1219]: time="2025-07-15T11:19:34.793357804Z" level=info msg="StartContainer for \"412ba51d50e3a52cd8db4d861b04517510de2689677b9e3b1d48fd883c095b75\"" Jul 15 11:19:34.801851 env[1219]: time="2025-07-15T11:19:34.800552952Z" level=info msg="CreateContainer within sandbox \"2b72466cb793ecad8abe098c0f1acf7d3929703a911f0a34adb6ec38cdf89d96\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"15e22f8ad268124f04af852f2216db3523e9c0baf6bb592d3a7b3e292e1c2656\"" Jul 15 11:19:34.801851 env[1219]: time="2025-07-15T11:19:34.800910215Z" level=info msg="StartContainer for \"15e22f8ad268124f04af852f2216db3523e9c0baf6bb592d3a7b3e292e1c2656\"" Jul 15 11:19:34.811958 systemd[1]: Started cri-containerd-412ba51d50e3a52cd8db4d861b04517510de2689677b9e3b1d48fd883c095b75.scope. Jul 15 11:19:34.820564 systemd[1]: Started cri-containerd-15e22f8ad268124f04af852f2216db3523e9c0baf6bb592d3a7b3e292e1c2656.scope. Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.838000 audit: BPF prog-id=67 op=LOAD Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1669 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431326261353164353065336135326364386462346438363162303435 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1669 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431326261353164353065336135326364386462346438363162303435 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit: BPF prog-id=68 op=LOAD Jul 15 11:19:34.839000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1669 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431326261353164353065336135326364386462346438363162303435 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.839000 audit: BPF prog-id=69 op=LOAD Jul 15 11:19:34.839000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1669 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431326261353164353065336135326364386462346438363162303435 Jul 15 11:19:34.840000 audit: BPF prog-id=69 op=UNLOAD Jul 15 11:19:34.840000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { perfmon } for pid=1799 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit[1799]: AVC avc: denied { bpf } for pid=1799 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit: BPF prog-id=70 op=LOAD Jul 15 11:19:34.840000 audit[1799]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1669 pid=1799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.840000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431326261353164353065336135326364386462346438363162303435 Jul 15 11:19:34.840000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.840000 audit: BPF prog-id=71 op=LOAD Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1668 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396166366661346364383762643231353363356262646639623036 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1668 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396166366661346364383762643231353363356262646639623036 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit: BPF prog-id=72 op=LOAD Jul 15 11:19:34.841000 audit[1779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1668 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396166366661346364383762643231353363356262646639623036 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit: BPF prog-id=73 op=LOAD Jul 15 11:19:34.841000 audit[1779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1668 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396166366661346364383762643231353363356262646639623036 Jul 15 11:19:34.841000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:19:34.841000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { perfmon } for pid=1779 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit[1779]: AVC avc: denied { bpf } for pid=1779 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.841000 audit: BPF prog-id=74 op=LOAD Jul 15 11:19:34.841000 audit[1779]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1668 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.841000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261396166366661346364383762643231353363356262646639623036 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit: BPF prog-id=75 op=LOAD Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400014db38 a2=10 a3=0 items=0 ppid=1667 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653232663861643236383132346630346166383532663232313664 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400014d5a0 a2=3c a3=0 items=0 ppid=1667 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653232663861643236383132346630346166383532663232313664 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.842000 audit: BPF prog-id=76 op=LOAD Jul 15 11:19:34.842000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014d8e0 a2=78 a3=0 items=0 ppid=1667 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653232663861643236383132346630346166383532663232313664 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit: BPF prog-id=77 op=LOAD Jul 15 11:19:34.843000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400014d670 a2=78 a3=0 items=0 ppid=1667 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653232663861643236383132346630346166383532663232313664 Jul 15 11:19:34.843000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:19:34.843000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { perfmon } for pid=1815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit[1815]: AVC avc: denied { bpf } for pid=1815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:34.843000 audit: BPF prog-id=78 op=LOAD Jul 15 11:19:34.843000 audit[1815]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400014db40 a2=78 a3=0 items=0 ppid=1667 pid=1815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:34.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135653232663861643236383132346630346166383532663232313664 Jul 15 11:19:34.851457 kubelet[1609]: E0715 11:19:34.851301 1609 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.109:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.109:6443: connect: connection refused" interval="1.6s" Jul 15 11:19:34.863282 env[1219]: time="2025-07-15T11:19:34.863235236Z" level=info msg="StartContainer for \"ba9af6fa4cd87bd2153c5bbdf9b06b9f0f3b536bb5ec6f3f0bc1950153a440c6\" returns successfully" Jul 15 11:19:34.880882 env[1219]: time="2025-07-15T11:19:34.880441855Z" level=info msg="StartContainer for \"412ba51d50e3a52cd8db4d861b04517510de2689677b9e3b1d48fd883c095b75\" returns successfully" Jul 15 11:19:34.899300 env[1219]: time="2025-07-15T11:19:34.899154366Z" level=info msg="StartContainer for \"15e22f8ad268124f04af852f2216db3523e9c0baf6bb592d3a7b3e292e1c2656\" returns successfully" Jul 15 11:19:35.102747 kubelet[1609]: I0715 11:19:35.102083 1609 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:19:35.471571 kubelet[1609]: E0715 11:19:35.471467 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:35.473441 kubelet[1609]: E0715 11:19:35.473416 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:35.475208 kubelet[1609]: E0715 11:19:35.475184 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:36.177000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:36.177000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003a04e70 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:19:36.177000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:19:36.178000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:36.178000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=4003a04f00 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:19:36.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:19:36.180000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:36.180000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=46 a1=40096beb60 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:19:36.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:19:36.180000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:36.180000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:36.180000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=40096beda0 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:19:36.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:19:36.180000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=48 a1=4006af9b60 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:19:36.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:19:36.181000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:36.181000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=47 a1=4006c8c120 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:19:36.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:19:36.309902 kubelet[1609]: I0715 11:19:36.309854 1609 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:19:36.309902 kubelet[1609]: E0715 11:19:36.309892 1609 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 15 11:19:36.322632 kubelet[1609]: E0715 11:19:36.322600 1609 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:19:36.426332 kubelet[1609]: I0715 11:19:36.426306 1609 apiserver.go:52] "Watching apiserver" Jul 15 11:19:36.444292 kubelet[1609]: I0715 11:19:36.444211 1609 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:19:36.480839 kubelet[1609]: E0715 11:19:36.480788 1609 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:36.480990 kubelet[1609]: E0715 11:19:36.480969 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:37.471497 kernel: kauditd_printk_skb: 586 callbacks suppressed Jul 15 11:19:37.471637 kernel: audit: type=1400 audit(1752578377.462:553): avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:37.471668 kernel: audit: type=1300 audit(1752578377.462:553): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003fa060 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:37.471689 kernel: audit: type=1327 audit(1752578377.462:553): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:37.462000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:37.462000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40003fa060 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:37.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:37.474819 kernel: audit: type=1400 audit(1752578377.462:554): avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:37.462000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:37.462000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400037e810 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:37.484028 kernel: audit: type=1300 audit(1752578377.462:554): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=400037e810 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:37.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:37.484744 kubelet[1609]: E0715 11:19:37.484722 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:37.487757 kernel: audit: type=1327 audit(1752578377.462:554): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:38.424179 systemd[1]: Reloading. Jul 15 11:19:38.467258 /usr/lib/systemd/system-generators/torcx-generator[1909]: time="2025-07-15T11:19:38Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:19:38.470029 /usr/lib/systemd/system-generators/torcx-generator[1909]: time="2025-07-15T11:19:38Z" level=info msg="torcx already run" Jul 15 11:19:38.478783 kubelet[1609]: E0715 11:19:38.478747 1609 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:38.549662 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:19:38.549676 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:19:38.569301 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632949 kernel: audit: type=1400 audit(1752578378.627:555): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.633000 kernel: audit: type=1400 audit(1752578378.627:556): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.633019 kernel: audit: type=1400 audit(1752578378.627:557): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.637560 kernel: audit: type=1400 audit(1752578378.627:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.627000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.629000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.629000 audit: BPF prog-id=79 op=LOAD Jul 15 11:19:38.629000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit: BPF prog-id=80 op=LOAD Jul 15 11:19:38.632000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.632000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.634000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.634000 audit: BPF prog-id=81 op=LOAD Jul 15 11:19:38.634000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.635000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit: BPF prog-id=82 op=LOAD Jul 15 11:19:38.636000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit: BPF prog-id=83 op=LOAD Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.637000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.637000 audit: BPF prog-id=84 op=LOAD Jul 15 11:19:38.637000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:19:38.637000 audit: BPF prog-id=42 op=UNLOAD Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit: BPF prog-id=85 op=LOAD Jul 15 11:19:38.638000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit: BPF prog-id=86 op=LOAD Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.638000 audit: BPF prog-id=87 op=LOAD Jul 15 11:19:38.638000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:19:38.638000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.639000 audit: BPF prog-id=88 op=LOAD Jul 15 11:19:38.639000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit: BPF prog-id=89 op=LOAD Jul 15 11:19:38.641000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit: BPF prog-id=90 op=LOAD Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.641000 audit: BPF prog-id=91 op=LOAD Jul 15 11:19:38.641000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:19:38.641000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit: BPF prog-id=92 op=LOAD Jul 15 11:19:38.642000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.642000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit: BPF prog-id=93 op=LOAD Jul 15 11:19:38.643000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit: BPF prog-id=94 op=LOAD Jul 15 11:19:38.643000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit: BPF prog-id=95 op=LOAD Jul 15 11:19:38.644000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit: BPF prog-id=96 op=LOAD Jul 15 11:19:38.644000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.644000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit: BPF prog-id=97 op=LOAD Jul 15 11:19:38.645000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit: BPF prog-id=98 op=LOAD Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.645000 audit: BPF prog-id=99 op=LOAD Jul 15 11:19:38.645000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:19:38.645000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:19:38.656106 systemd[1]: Stopping kubelet.service... Jul 15 11:19:38.684087 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:19:38.684503 systemd[1]: Stopped kubelet.service. Jul 15 11:19:38.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:38.684683 systemd[1]: kubelet.service: Consumed 1.344s CPU time. Jul 15 11:19:38.689263 systemd[1]: Starting kubelet.service... Jul 15 11:19:38.785249 systemd[1]: Started kubelet.service. Jul 15 11:19:38.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:38.828558 kubelet[1951]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:19:38.829832 kubelet[1951]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:19:38.829917 kubelet[1951]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:19:38.830087 kubelet[1951]: I0715 11:19:38.830054 1951 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:19:38.839186 kubelet[1951]: I0715 11:19:38.839155 1951 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:19:38.839186 kubelet[1951]: I0715 11:19:38.839181 1951 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:19:38.839404 kubelet[1951]: I0715 11:19:38.839387 1951 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:19:38.840692 kubelet[1951]: I0715 11:19:38.840665 1951 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:19:38.842774 kubelet[1951]: I0715 11:19:38.842733 1951 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:19:38.845402 kubelet[1951]: E0715 11:19:38.845373 1951 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:19:38.845402 kubelet[1951]: I0715 11:19:38.845404 1951 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:19:38.847625 kubelet[1951]: I0715 11:19:38.847602 1951 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:19:38.847716 kubelet[1951]: I0715 11:19:38.847692 1951 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:19:38.847832 kubelet[1951]: I0715 11:19:38.847795 1951 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:19:38.848001 kubelet[1951]: I0715 11:19:38.847834 1951 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:19:38.848080 kubelet[1951]: I0715 11:19:38.848003 1951 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:19:38.848080 kubelet[1951]: I0715 11:19:38.848012 1951 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:19:38.848080 kubelet[1951]: I0715 11:19:38.848042 1951 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:19:38.848151 kubelet[1951]: I0715 11:19:38.848132 1951 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:19:38.848151 kubelet[1951]: I0715 11:19:38.848143 1951 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:19:38.848195 kubelet[1951]: I0715 11:19:38.848158 1951 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:19:38.848195 kubelet[1951]: I0715 11:19:38.848170 1951 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:19:38.855466 kubelet[1951]: I0715 11:19:38.855438 1951 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:19:38.855983 kubelet[1951]: I0715 11:19:38.855965 1951 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:19:38.856616 kubelet[1951]: I0715 11:19:38.856593 1951 server.go:1274] "Started kubelet" Jul 15 11:19:38.858000 audit[1951]: AVC avc: denied { mac_admin } for pid=1951 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.858000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:19:38.858000 audit[1951]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b8b410 a1=4000baa7b0 a2=4000b8b3e0 a3=25 items=0 ppid=1 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:38.858000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:19:38.858000 audit[1951]: AVC avc: denied { mac_admin } for pid=1951 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.858000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:19:38.858000 audit[1951]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b86880 a1=4000baa7c8 a2=4000b8b4a0 a3=25 items=0 ppid=1 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:38.858000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:19:38.859336 kubelet[1951]: I0715 11:19:38.859045 1951 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:19:38.859336 kubelet[1951]: I0715 11:19:38.859090 1951 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:19:38.859336 kubelet[1951]: I0715 11:19:38.859112 1951 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:19:38.863192 kubelet[1951]: I0715 11:19:38.863132 1951 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:19:38.864313 kubelet[1951]: I0715 11:19:38.864283 1951 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:19:38.865447 kubelet[1951]: I0715 11:19:38.865403 1951 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:19:38.865638 kubelet[1951]: I0715 11:19:38.865592 1951 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:19:38.865710 kubelet[1951]: E0715 11:19:38.865681 1951 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:19:38.867260 kubelet[1951]: I0715 11:19:38.866304 1951 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:19:38.869095 kubelet[1951]: I0715 11:19:38.869071 1951 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:19:38.869216 kubelet[1951]: I0715 11:19:38.869200 1951 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:19:38.869338 kubelet[1951]: I0715 11:19:38.869325 1951 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:19:38.869563 kubelet[1951]: I0715 11:19:38.869543 1951 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:19:38.871760 kubelet[1951]: I0715 11:19:38.871729 1951 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:19:38.873920 kubelet[1951]: I0715 11:19:38.873876 1951 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:19:38.879344 kubelet[1951]: I0715 11:19:38.873867 1951 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:19:38.880208 kubelet[1951]: I0715 11:19:38.880181 1951 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:19:38.880208 kubelet[1951]: I0715 11:19:38.880202 1951 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:19:38.880306 kubelet[1951]: I0715 11:19:38.880219 1951 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:19:38.880306 kubelet[1951]: E0715 11:19:38.880269 1951 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:19:38.904122 kubelet[1951]: I0715 11:19:38.904096 1951 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:19:38.904122 kubelet[1951]: I0715 11:19:38.904115 1951 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:19:38.904239 kubelet[1951]: I0715 11:19:38.904136 1951 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:19:38.904239 kubelet[1951]: I0715 11:19:38.904315 1951 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:19:38.904399 kubelet[1951]: I0715 11:19:38.904329 1951 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:19:38.904399 kubelet[1951]: I0715 11:19:38.904347 1951 policy_none.go:49] "None policy: Start" Jul 15 11:19:38.904855 kubelet[1951]: I0715 11:19:38.904831 1951 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:19:38.905264 kubelet[1951]: I0715 11:19:38.904927 1951 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:19:38.905264 kubelet[1951]: I0715 11:19:38.905110 1951 state_mem.go:75] "Updated machine memory state" Jul 15 11:19:38.908750 kubelet[1951]: I0715 11:19:38.908725 1951 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:19:38.907000 audit[1951]: AVC avc: denied { mac_admin } for pid=1951 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:38.907000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:19:38.907000 audit[1951]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000b8b470 a1=40007a1de8 a2=4000b8b440 a3=25 items=0 ppid=1 pid=1951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:38.907000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:19:38.909029 kubelet[1951]: I0715 11:19:38.908779 1951 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:19:38.910036 kubelet[1951]: I0715 11:19:38.910005 1951 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:19:38.910285 kubelet[1951]: I0715 11:19:38.910028 1951 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:19:38.910443 kubelet[1951]: I0715 11:19:38.910430 1951 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:19:38.986681 kubelet[1951]: E0715 11:19:38.986582 1951 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:39.017999 kubelet[1951]: I0715 11:19:39.017973 1951 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:19:39.024362 kubelet[1951]: I0715 11:19:39.024339 1951 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 15 11:19:39.024513 kubelet[1951]: I0715 11:19:39.024502 1951 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:19:39.170948 kubelet[1951]: I0715 11:19:39.170917 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/1c73fad9180f828c89c8bbb59bb452cd-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c73fad9180f828c89c8bbb59bb452cd\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:39.171104 kubelet[1951]: I0715 11:19:39.171087 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/1c73fad9180f828c89c8bbb59bb452cd-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"1c73fad9180f828c89c8bbb59bb452cd\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:39.171176 kubelet[1951]: I0715 11:19:39.171160 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:39.171245 kubelet[1951]: I0715 11:19:39.171233 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:39.171343 kubelet[1951]: I0715 11:19:39.171328 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:19:39.171417 kubelet[1951]: I0715 11:19:39.171401 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/1c73fad9180f828c89c8bbb59bb452cd-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"1c73fad9180f828c89c8bbb59bb452cd\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:19:39.171485 kubelet[1951]: I0715 11:19:39.171472 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:39.171624 kubelet[1951]: I0715 11:19:39.171606 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:39.171728 kubelet[1951]: I0715 11:19:39.171709 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:19:39.286652 kubelet[1951]: E0715 11:19:39.286563 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:39.287142 kubelet[1951]: E0715 11:19:39.287116 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:39.287142 kubelet[1951]: E0715 11:19:39.287136 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:39.849306 kubelet[1951]: I0715 11:19:39.849270 1951 apiserver.go:52] "Watching apiserver" Jul 15 11:19:39.854000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7314 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:19:39.854000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400036ffc0 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:39.854000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:39.869943 kubelet[1951]: I0715 11:19:39.869909 1951 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:19:39.890604 kubelet[1951]: E0715 11:19:39.890574 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:39.890699 kubelet[1951]: E0715 11:19:39.890637 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:39.890858 kubelet[1951]: E0715 11:19:39.890836 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:39.907018 kubelet[1951]: I0715 11:19:39.906969 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.906958347 podStartE2EDuration="1.906958347s" podCreationTimestamp="2025-07-15 11:19:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:19:39.906542973 +0000 UTC m=+1.115551909" watchObservedRunningTime="2025-07-15 11:19:39.906958347 +0000 UTC m=+1.115967323" Jul 15 11:19:39.939753 kubelet[1951]: I0715 11:19:39.939701 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=2.939682258 podStartE2EDuration="2.939682258s" podCreationTimestamp="2025-07-15 11:19:37 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:19:39.921872351 +0000 UTC m=+1.130881327" watchObservedRunningTime="2025-07-15 11:19:39.939682258 +0000 UTC m=+1.148691234" Jul 15 11:19:39.971077 kubelet[1951]: I0715 11:19:39.971014 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.971000685 podStartE2EDuration="1.971000685s" podCreationTimestamp="2025-07-15 11:19:38 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:19:39.940548757 +0000 UTC m=+1.149557733" watchObservedRunningTime="2025-07-15 11:19:39.971000685 +0000 UTC m=+1.180009661" Jul 15 11:19:40.892170 kubelet[1951]: E0715 11:19:40.892123 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:41.553000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:41.553000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400014af40 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:41.553000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:41.553000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:41.553000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400014afa0 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:41.553000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:41.554000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:41.554000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000b7de40 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:41.554000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:41.554000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:19:41.554000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=400014b540 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:19:41.554000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:19:41.893453 kubelet[1951]: E0715 11:19:41.893334 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:43.112881 kubelet[1951]: I0715 11:19:43.112849 1951 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:19:43.113462 env[1219]: time="2025-07-15T11:19:43.113157910Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:19:43.114455 kubelet[1951]: I0715 11:19:43.113905 1951 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:19:44.026431 systemd[1]: Created slice kubepods-besteffort-podf7fda7a8_d3bd_4bd2_8dc9_7982b5d6655c.slice. Jul 15 11:19:44.109930 kubelet[1951]: I0715 11:19:44.109870 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-zj244\" (UniqueName: \"kubernetes.io/projected/f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c-kube-api-access-zj244\") pod \"kube-proxy-m56cc\" (UID: \"f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c\") " pod="kube-system/kube-proxy-m56cc" Jul 15 11:19:44.109930 kubelet[1951]: I0715 11:19:44.109919 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c-kube-proxy\") pod \"kube-proxy-m56cc\" (UID: \"f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c\") " pod="kube-system/kube-proxy-m56cc" Jul 15 11:19:44.109930 kubelet[1951]: I0715 11:19:44.109941 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c-xtables-lock\") pod \"kube-proxy-m56cc\" (UID: \"f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c\") " pod="kube-system/kube-proxy-m56cc" Jul 15 11:19:44.110184 kubelet[1951]: I0715 11:19:44.109959 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c-lib-modules\") pod \"kube-proxy-m56cc\" (UID: \"f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c\") " pod="kube-system/kube-proxy-m56cc" Jul 15 11:19:44.175694 systemd[1]: Created slice kubepods-besteffort-pod03bbb6d3_e132_4fc6_b38b_6bd54cd3e5c4.slice. Jul 15 11:19:44.210387 kubelet[1951]: I0715 11:19:44.210349 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/03bbb6d3-e132-4fc6-b38b-6bd54cd3e5c4-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-7lm5s\" (UID: \"03bbb6d3-e132-4fc6-b38b-6bd54cd3e5c4\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-7lm5s" Jul 15 11:19:44.210387 kubelet[1951]: I0715 11:19:44.210388 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cbcp5\" (UniqueName: \"kubernetes.io/projected/03bbb6d3-e132-4fc6-b38b-6bd54cd3e5c4-kube-api-access-cbcp5\") pod \"tigera-operator-5bf8dfcb4-7lm5s\" (UID: \"03bbb6d3-e132-4fc6-b38b-6bd54cd3e5c4\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-7lm5s" Jul 15 11:19:44.217407 kubelet[1951]: I0715 11:19:44.217361 1951 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:19:44.336462 kubelet[1951]: E0715 11:19:44.336369 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:44.337677 env[1219]: time="2025-07-15T11:19:44.337292543Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-m56cc,Uid:f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c,Namespace:kube-system,Attempt:0,}" Jul 15 11:19:44.354448 env[1219]: time="2025-07-15T11:19:44.354386977Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:44.354448 env[1219]: time="2025-07-15T11:19:44.354425255Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:44.354448 env[1219]: time="2025-07-15T11:19:44.354436295Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:44.354616 env[1219]: time="2025-07-15T11:19:44.354583608Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ce14b8cce3117b579747aacef664a2950fba29e51283c732de36aa7eb595d1af pid=2011 runtime=io.containerd.runc.v2 Jul 15 11:19:44.370837 systemd[1]: Started cri-containerd-ce14b8cce3117b579747aacef664a2950fba29e51283c732de36aa7eb595d1af.scope. Jul 15 11:19:44.374011 kubelet[1951]: E0715 11:19:44.371797 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.396130 kernel: kauditd_printk_skb: 269 callbacks suppressed Jul 15 11:19:44.396184 kernel: audit: type=1400 audit(1752578384.394:809): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400666 kernel: audit: type=1400 audit(1752578384.394:810): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400713 kernel: audit: type=1400 audit(1752578384.394:811): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.405317 kernel: audit: type=1400 audit(1752578384.394:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.405398 kernel: audit: type=1400 audit(1752578384.394:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.409918 kernel: audit: type=1400 audit(1752578384.394:814): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.409951 kernel: audit: type=1400 audit(1752578384.394:815): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.414648 kernel: audit: type=1400 audit(1752578384.394:816): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.394000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.417297 kernel: audit: type=1400 audit(1752578384.394:817): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.417361 kernel: audit: type=1400 audit(1752578384.395:818): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit: BPF prog-id=100 op=LOAD Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2011 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313462386363653331313762353739373437616163656636363461 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2011 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313462386363653331313762353739373437616163656636363461 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.395000 audit: BPF prog-id=101 op=LOAD Jul 15 11:19:44.395000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2011 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.395000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313462386363653331313762353739373437616163656636363461 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.397000 audit: BPF prog-id=102 op=LOAD Jul 15 11:19:44.397000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2011 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.397000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313462386363653331313762353739373437616163656636363461 Jul 15 11:19:44.400000 audit: BPF prog-id=102 op=UNLOAD Jul 15 11:19:44.400000 audit: BPF prog-id=101 op=UNLOAD Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { perfmon } for pid=2021 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit[2021]: AVC avc: denied { bpf } for pid=2021 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.400000 audit: BPF prog-id=103 op=LOAD Jul 15 11:19:44.400000 audit[2021]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2011 pid=2021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.400000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365313462386363653331313762353739373437616163656636363461 Jul 15 11:19:44.422633 env[1219]: time="2025-07-15T11:19:44.422594801Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-m56cc,Uid:f7fda7a8-d3bd-4bd2-8dc9-7982b5d6655c,Namespace:kube-system,Attempt:0,} returns sandbox id \"ce14b8cce3117b579747aacef664a2950fba29e51283c732de36aa7eb595d1af\"" Jul 15 11:19:44.423546 kubelet[1951]: E0715 11:19:44.423344 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:44.425482 env[1219]: time="2025-07-15T11:19:44.425450026Z" level=info msg="CreateContainer within sandbox \"ce14b8cce3117b579747aacef664a2950fba29e51283c732de36aa7eb595d1af\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:19:44.437705 env[1219]: time="2025-07-15T11:19:44.437661210Z" level=info msg="CreateContainer within sandbox \"ce14b8cce3117b579747aacef664a2950fba29e51283c732de36aa7eb595d1af\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"c38f69b0bcbfa7cee02cf7f66215cd2bd4daed6a9e7ff49a6ffd447a01e3815f\"" Jul 15 11:19:44.438177 env[1219]: time="2025-07-15T11:19:44.438147467Z" level=info msg="StartContainer for \"c38f69b0bcbfa7cee02cf7f66215cd2bd4daed6a9e7ff49a6ffd447a01e3815f\"" Jul 15 11:19:44.452967 systemd[1]: Started cri-containerd-c38f69b0bcbfa7cee02cf7f66215cd2bd4daed6a9e7ff49a6ffd447a01e3815f.scope. Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2011 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386636396230626362666137636565303263663766363632313563 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.476000 audit: BPF prog-id=104 op=LOAD Jul 15 11:19:44.476000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2011 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386636396230626362666137636565303263663766363632313563 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.477000 audit: BPF prog-id=105 op=LOAD Jul 15 11:19:44.479480 env[1219]: time="2025-07-15T11:19:44.479425281Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-7lm5s,Uid:03bbb6d3-e132-4fc6-b38b-6bd54cd3e5c4,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:19:44.477000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2011 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386636396230626362666137636565303263663766363632313563 Jul 15 11:19:44.479000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:19:44.479000 audit: BPF prog-id=104 op=UNLOAD Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { perfmon } for pid=2051 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit[2051]: AVC avc: denied { bpf } for pid=2051 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.479000 audit: BPF prog-id=106 op=LOAD Jul 15 11:19:44.479000 audit[2051]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2011 pid=2051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333386636396230626362666137636565303263663766363632313563 Jul 15 11:19:44.494777 env[1219]: time="2025-07-15T11:19:44.494706840Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:44.494777 env[1219]: time="2025-07-15T11:19:44.494744958Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:44.494777 env[1219]: time="2025-07-15T11:19:44.494757758Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:44.495129 env[1219]: time="2025-07-15T11:19:44.495087182Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a39bf1f1ce586138b10977b57ad5e2669df0bc1bfe33ff473969a7637bf839ec pid=2082 runtime=io.containerd.runc.v2 Jul 15 11:19:44.501295 env[1219]: time="2025-07-15T11:19:44.501257571Z" level=info msg="StartContainer for \"c38f69b0bcbfa7cee02cf7f66215cd2bd4daed6a9e7ff49a6ffd447a01e3815f\" returns successfully" Jul 15 11:19:44.506177 systemd[1]: Started cri-containerd-a39bf1f1ce586138b10977b57ad5e2669df0bc1bfe33ff473969a7637bf839ec.scope. Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.535000 audit: BPF prog-id=107 op=LOAD Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2082 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133396266316631636535383631333862313039373762353761643565 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2082 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133396266316631636535383631333862313039373762353761643565 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit: BPF prog-id=108 op=LOAD Jul 15 11:19:44.536000 audit[2091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2082 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133396266316631636535383631333862313039373762353761643565 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit: BPF prog-id=109 op=LOAD Jul 15 11:19:44.536000 audit[2091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2082 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133396266316631636535383631333862313039373762353761643565 Jul 15 11:19:44.536000 audit: BPF prog-id=109 op=UNLOAD Jul 15 11:19:44.536000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { perfmon } for pid=2091 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit[2091]: AVC avc: denied { bpf } for pid=2091 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:44.536000 audit: BPF prog-id=110 op=LOAD Jul 15 11:19:44.536000 audit[2091]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2082 pid=2091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6133396266316631636535383631333862313039373762353761643565 Jul 15 11:19:44.555628 env[1219]: time="2025-07-15T11:19:44.555574170Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-7lm5s,Uid:03bbb6d3-e132-4fc6-b38b-6bd54cd3e5c4,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"a39bf1f1ce586138b10977b57ad5e2669df0bc1bfe33ff473969a7637bf839ec\"" Jul 15 11:19:44.557683 env[1219]: time="2025-07-15T11:19:44.556977584Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:19:44.699000 audit[2155]: NETFILTER_CFG table=mangle:38 family=10 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.699000 audit[2155]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffea193980 a2=0 a3=1 items=0 ppid=2062 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.699000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:19:44.700000 audit[2156]: NETFILTER_CFG table=nat:39 family=10 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.700000 audit[2156]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd6b52b90 a2=0 a3=1 items=0 ppid=2062 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.700000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:19:44.702000 audit[2157]: NETFILTER_CFG table=filter:40 family=10 entries=1 op=nft_register_chain pid=2157 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.702000 audit[2157]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcaccc4f0 a2=0 a3=1 items=0 ppid=2062 pid=2157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.702000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:19:44.706000 audit[2154]: NETFILTER_CFG table=mangle:41 family=2 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.706000 audit[2154]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe79cb2f0 a2=0 a3=1 items=0 ppid=2062 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.706000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:19:44.707000 audit[2158]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.707000 audit[2158]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc6948d90 a2=0 a3=1 items=0 ppid=2062 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.707000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:19:44.708000 audit[2159]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.708000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc9480610 a2=0 a3=1 items=0 ppid=2062 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.708000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:19:44.805000 audit[2160]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.805000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=fffff96aa9a0 a2=0 a3=1 items=0 ppid=2062 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.805000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:19:44.809000 audit[2162]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.809000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd809b310 a2=0 a3=1 items=0 ppid=2062 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.809000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:19:44.813000 audit[2165]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.813000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=fffffbecade0 a2=0 a3=1 items=0 ppid=2062 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.813000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:19:44.814000 audit[2166]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2166 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.814000 audit[2166]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe13a3df0 a2=0 a3=1 items=0 ppid=2062 pid=2166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.814000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:19:44.816000 audit[2168]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2168 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.816000 audit[2168]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd00453f0 a2=0 a3=1 items=0 ppid=2062 pid=2168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.816000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:19:44.817000 audit[2169]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2169 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.817000 audit[2169]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd64cb8d0 a2=0 a3=1 items=0 ppid=2062 pid=2169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.817000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:19:44.819000 audit[2171]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.819000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffde71300 a2=0 a3=1 items=0 ppid=2062 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.819000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:19:44.822000 audit[2174]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.822000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffc25964d0 a2=0 a3=1 items=0 ppid=2062 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.822000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:19:44.823000 audit[2175]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2175 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.823000 audit[2175]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd0911200 a2=0 a3=1 items=0 ppid=2062 pid=2175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.823000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:19:44.826000 audit[2177]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2177 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.826000 audit[2177]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffced3af60 a2=0 a3=1 items=0 ppid=2062 pid=2177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:19:44.826000 audit[2178]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2178 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.826000 audit[2178]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd1abfcd0 a2=0 a3=1 items=0 ppid=2062 pid=2178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.826000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:19:44.829000 audit[2180]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.829000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc6f11820 a2=0 a3=1 items=0 ppid=2062 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.829000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:19:44.832000 audit[2183]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.832000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff41dd200 a2=0 a3=1 items=0 ppid=2062 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.832000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:19:44.835000 audit[2186]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2186 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.835000 audit[2186]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc05e0f30 a2=0 a3=1 items=0 ppid=2062 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.835000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:19:44.836000 audit[2187]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2187 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.836000 audit[2187]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffed8e55b0 a2=0 a3=1 items=0 ppid=2062 pid=2187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.836000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:19:44.838000 audit[2189]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.838000 audit[2189]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffedce6ca0 a2=0 a3=1 items=0 ppid=2062 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.838000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:19:44.841000 audit[2192]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.841000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffce93a670 a2=0 a3=1 items=0 ppid=2062 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.841000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:19:44.842000 audit[2193]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2193 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.842000 audit[2193]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd8c92760 a2=0 a3=1 items=0 ppid=2062 pid=2193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.842000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:19:44.844000 audit[2195]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2195 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:19:44.844000 audit[2195]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffe8f69700 a2=0 a3=1 items=0 ppid=2062 pid=2195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.844000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:19:44.866000 audit[2201]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:44.866000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=fffffff259a0 a2=0 a3=1 items=0 ppid=2062 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:44.886000 audit[2201]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2201 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:44.886000 audit[2201]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=fffffff259a0 a2=0 a3=1 items=0 ppid=2062 pid=2201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.886000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:44.887000 audit[2206]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.887000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffda183b40 a2=0 a3=1 items=0 ppid=2062 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.887000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:19:44.889000 audit[2208]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.889000 audit[2208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff39fd0c0 a2=0 a3=1 items=0 ppid=2062 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.889000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:19:44.892000 audit[2211]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.892000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=ffffc74bdf80 a2=0 a3=1 items=0 ppid=2062 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.892000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:19:44.893000 audit[2212]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2212 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.893000 audit[2212]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe601d0d0 a2=0 a3=1 items=0 ppid=2062 pid=2212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.893000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:19:44.895000 audit[2214]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2214 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.895000 audit[2214]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd25caaf0 a2=0 a3=1 items=0 ppid=2062 pid=2214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.895000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:19:44.899190 kubelet[1951]: E0715 11:19:44.899157 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:44.899697 kubelet[1951]: E0715 11:19:44.899670 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:44.898000 audit[2215]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2215 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.898000 audit[2215]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff6693e40 a2=0 a3=1 items=0 ppid=2062 pid=2215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.898000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:19:44.902000 audit[2217]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.902000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=fffffe5eac40 a2=0 a3=1 items=0 ppid=2062 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.902000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:19:44.906000 audit[2220]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.906000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=fffff5f7ef20 a2=0 a3=1 items=0 ppid=2062 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.906000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:19:44.908000 audit[2221]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2221 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.908000 audit[2221]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe685f380 a2=0 a3=1 items=0 ppid=2062 pid=2221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.908000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:19:44.911000 audit[2223]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2223 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.911000 audit[2223]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd5e884a0 a2=0 a3=1 items=0 ppid=2062 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:19:44.911000 audit[2224]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2224 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.911000 audit[2224]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffedb374e0 a2=0 a3=1 items=0 ppid=2062 pid=2224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.911000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:19:44.914000 audit[2226]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.914000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffecb35a70 a2=0 a3=1 items=0 ppid=2062 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.914000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:19:44.916498 kubelet[1951]: I0715 11:19:44.916448 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-m56cc" podStartSLOduration=0.916434154 podStartE2EDuration="916.434154ms" podCreationTimestamp="2025-07-15 11:19:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:19:44.915943697 +0000 UTC m=+6.124952673" watchObservedRunningTime="2025-07-15 11:19:44.916434154 +0000 UTC m=+6.125443090" Jul 15 11:19:44.918000 audit[2229]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.918000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffffedc0470 a2=0 a3=1 items=0 ppid=2062 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.918000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:19:44.921000 audit[2232]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2232 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.921000 audit[2232]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffd1db63b0 a2=0 a3=1 items=0 ppid=2062 pid=2232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.921000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:19:44.922000 audit[2233]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2233 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.922000 audit[2233]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff6dd95a0 a2=0 a3=1 items=0 ppid=2062 pid=2233 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.922000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:19:44.924000 audit[2235]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.924000 audit[2235]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=ffffda7987a0 a2=0 a3=1 items=0 ppid=2062 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.924000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:19:44.927000 audit[2238]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.927000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffe865bd30 a2=0 a3=1 items=0 ppid=2062 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.927000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:19:44.928000 audit[2239]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2239 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.928000 audit[2239]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffffde4f60 a2=0 a3=1 items=0 ppid=2062 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.928000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:19:44.930000 audit[2241]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2241 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.930000 audit[2241]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=ffffe4288db0 a2=0 a3=1 items=0 ppid=2062 pid=2241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.930000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:19:44.932000 audit[2242]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2242 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.932000 audit[2242]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffffa946c60 a2=0 a3=1 items=0 ppid=2062 pid=2242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.932000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:19:44.934000 audit[2244]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.934000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff3860ee0 a2=0 a3=1 items=0 ppid=2062 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.934000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:19:44.937000 audit[2247]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:19:44.937000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=fffff73609b0 a2=0 a3=1 items=0 ppid=2062 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.937000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:19:44.939000 audit[2249]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:19:44.939000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=fffffdf81ae0 a2=0 a3=1 items=0 ppid=2062 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.939000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:44.940000 audit[2249]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:19:44.940000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=fffffdf81ae0 a2=0 a3=1 items=0 ppid=2062 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:44.940000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:45.222834 systemd[1]: run-containerd-runc-k8s.io-ce14b8cce3117b579747aacef664a2950fba29e51283c732de36aa7eb595d1af-runc.5EK0X5.mount: Deactivated successfully. Jul 15 11:19:45.814862 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2796867307.mount: Deactivated successfully. Jul 15 11:19:46.354477 env[1219]: time="2025-07-15T11:19:46.354434855Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:46.355845 env[1219]: time="2025-07-15T11:19:46.355803837Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:46.358142 env[1219]: time="2025-07-15T11:19:46.358106500Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:46.359542 env[1219]: time="2025-07-15T11:19:46.359512880Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:46.360085 env[1219]: time="2025-07-15T11:19:46.360049298Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 15 11:19:46.363365 env[1219]: time="2025-07-15T11:19:46.363325520Z" level=info msg="CreateContainer within sandbox \"a39bf1f1ce586138b10977b57ad5e2669df0bc1bfe33ff473969a7637bf839ec\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:19:46.373081 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2858323474.mount: Deactivated successfully. Jul 15 11:19:46.377074 env[1219]: time="2025-07-15T11:19:46.377043821Z" level=info msg="CreateContainer within sandbox \"a39bf1f1ce586138b10977b57ad5e2669df0bc1bfe33ff473969a7637bf839ec\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"e574fab9841da5e28318fdb74f02596c4762dc0277cd4c8b950c1d32c95e2853\"" Jul 15 11:19:46.377798 env[1219]: time="2025-07-15T11:19:46.377770111Z" level=info msg="StartContainer for \"e574fab9841da5e28318fdb74f02596c4762dc0277cd4c8b950c1d32c95e2853\"" Jul 15 11:19:46.392877 systemd[1]: Started cri-containerd-e574fab9841da5e28318fdb74f02596c4762dc0277cd4c8b950c1d32c95e2853.scope. Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.412000 audit: BPF prog-id=111 op=LOAD Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2082 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:46.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535373466616239383431646135653238333138666462373466303235 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2082 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:46.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535373466616239383431646135653238333138666462373466303235 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit: BPF prog-id=112 op=LOAD Jul 15 11:19:46.413000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2082 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:46.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535373466616239383431646135653238333138666462373466303235 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit: BPF prog-id=113 op=LOAD Jul 15 11:19:46.413000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2082 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:46.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535373466616239383431646135653238333138666462373466303235 Jul 15 11:19:46.413000 audit: BPF prog-id=113 op=UNLOAD Jul 15 11:19:46.413000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { perfmon } for pid=2257 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit[2257]: AVC avc: denied { bpf } for pid=2257 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:46.413000 audit: BPF prog-id=114 op=LOAD Jul 15 11:19:46.413000 audit[2257]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2082 pid=2257 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:46.413000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6535373466616239383431646135653238333138666462373466303235 Jul 15 11:19:46.425751 env[1219]: time="2025-07-15T11:19:46.425712010Z" level=info msg="StartContainer for \"e574fab9841da5e28318fdb74f02596c4762dc0277cd4c8b950c1d32c95e2853\" returns successfully" Jul 15 11:19:46.910856 kubelet[1951]: I0715 11:19:46.910669 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-7lm5s" podStartSLOduration=1.106265631 podStartE2EDuration="2.910654087s" podCreationTimestamp="2025-07-15 11:19:44 +0000 UTC" firstStartedPulling="2025-07-15 11:19:44.556553844 +0000 UTC m=+5.765562820" lastFinishedPulling="2025-07-15 11:19:46.3609423 +0000 UTC m=+7.569951276" observedRunningTime="2025-07-15 11:19:46.910450536 +0000 UTC m=+8.119459512" watchObservedRunningTime="2025-07-15 11:19:46.910654087 +0000 UTC m=+8.119663063" Jul 15 11:19:47.341611 kubelet[1951]: E0715 11:19:47.341566 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:47.904502 kubelet[1951]: E0715 11:19:47.904467 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:51.837153 kubelet[1951]: E0715 11:19:51.837123 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:51.904902 sudo[1358]: pam_unix(sudo:session): session closed for user root Jul 15 11:19:51.911720 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 15 11:19:51.911876 kernel: audit: type=1106 audit(1752578391.904:920): pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:51.911906 kernel: audit: type=1104 audit(1752578391.904:921): pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:51.904000 audit[1358]: USER_END pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:51.904000 audit[1358]: CRED_DISP pid=1358 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:19:51.913979 kubelet[1951]: E0715 11:19:51.913948 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:51.913995 sshd[1355]: pam_unix(sshd:session): session closed for user core Jul 15 11:19:51.916000 audit[1355]: USER_END pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:51.918538 systemd[1]: sshd@6-10.0.0.109:22-10.0.0.1:33984.service: Deactivated successfully. Jul 15 11:19:51.919307 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:19:51.919549 systemd[1]: session-7.scope: Consumed 6.831s CPU time. Jul 15 11:19:51.921379 systemd-logind[1207]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:19:51.916000 audit[1355]: CRED_DISP pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:51.924513 kernel: audit: type=1106 audit(1752578391.916:922): pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:51.924582 kernel: audit: type=1104 audit(1752578391.916:923): pid=1355 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:19:51.925035 systemd-logind[1207]: Removed session 7. Jul 15 11:19:51.917000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.109:22-10.0.0.1:33984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:51.928215 kernel: audit: type=1131 audit(1752578391.917:924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.109:22-10.0.0.1:33984 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:19:52.707000 audit[2341]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:52.707000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff2bdd2c0 a2=0 a3=1 items=0 ppid=2062 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:52.715008 kernel: audit: type=1325 audit(1752578392.707:925): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:52.715097 kernel: audit: type=1300 audit(1752578392.707:925): arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffff2bdd2c0 a2=0 a3=1 items=0 ppid=2062 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:52.707000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:52.717141 kernel: audit: type=1327 audit(1752578392.707:925): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:52.716000 audit[2341]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:52.716000 audit[2341]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff2bdd2c0 a2=0 a3=1 items=0 ppid=2062 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:52.724332 kernel: audit: type=1325 audit(1752578392.716:926): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:52.724408 kernel: audit: type=1300 audit(1752578392.716:926): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffff2bdd2c0 a2=0 a3=1 items=0 ppid=2062 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:52.716000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:52.740000 audit[2343]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:52.740000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=fffffcbbabe0 a2=0 a3=1 items=0 ppid=2062 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:52.740000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:52.747000 audit[2343]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:52.747000 audit[2343]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffcbbabe0 a2=0 a3=1 items=0 ppid=2062 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:52.747000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:54.986915 update_engine[1210]: I0715 11:19:54.986871 1210 update_attempter.cc:509] Updating boot flags... Jul 15 11:19:55.379000 audit[2360]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:55.379000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc8ef3ed0 a2=0 a3=1 items=0 ppid=2062 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.379000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:55.390741 systemd[1]: Created slice kubepods-besteffort-pod1cc45ae6_4e05_49b9_b6c4_d50fd4dd0dd7.slice. Jul 15 11:19:55.392268 kubelet[1951]: I0715 11:19:55.392242 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7-typha-certs\") pod \"calico-typha-56b9d87976-ftpwz\" (UID: \"1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7\") " pod="calico-system/calico-typha-56b9d87976-ftpwz" Jul 15 11:19:55.392627 kubelet[1951]: I0715 11:19:55.392606 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7-tigera-ca-bundle\") pod \"calico-typha-56b9d87976-ftpwz\" (UID: \"1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7\") " pod="calico-system/calico-typha-56b9d87976-ftpwz" Jul 15 11:19:55.392740 kubelet[1951]: I0715 11:19:55.392723 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jt6qx\" (UniqueName: \"kubernetes.io/projected/1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7-kube-api-access-jt6qx\") pod \"calico-typha-56b9d87976-ftpwz\" (UID: \"1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7\") " pod="calico-system/calico-typha-56b9d87976-ftpwz" Jul 15 11:19:55.392000 audit[2360]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:55.392000 audit[2360]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc8ef3ed0 a2=0 a3=1 items=0 ppid=2062 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.392000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:55.416000 audit[2362]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:55.416000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd651b570 a2=0 a3=1 items=0 ppid=2062 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:55.423000 audit[2362]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2362 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:55.423000 audit[2362]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd651b570 a2=0 a3=1 items=0 ppid=2062 pid=2362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.423000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:55.693855 kubelet[1951]: E0715 11:19:55.693743 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:55.694403 env[1219]: time="2025-07-15T11:19:55.694360123Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-56b9d87976-ftpwz,Uid:1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7,Namespace:calico-system,Attempt:0,}" Jul 15 11:19:55.710720 env[1219]: time="2025-07-15T11:19:55.710644497Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:55.710874 env[1219]: time="2025-07-15T11:19:55.710699335Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:55.710874 env[1219]: time="2025-07-15T11:19:55.710709575Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:55.710966 env[1219]: time="2025-07-15T11:19:55.710920050Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/43ee6512ce67ab4fc4c3f9192e5052e42239eee681aa04a3452ca4f305271792 pid=2372 runtime=io.containerd.runc.v2 Jul 15 11:19:55.738444 systemd[1]: Created slice kubepods-besteffort-pod368fe74c_a374_419a_a30a_3c4de4765b77.slice. Jul 15 11:19:55.755611 systemd[1]: Started cri-containerd-43ee6512ce67ab4fc4c3f9192e5052e42239eee681aa04a3452ca4f305271792.scope. Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.782000 audit: BPF prog-id=115 op=LOAD Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2372 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433656536353132636536376162346663346333663931393265353035 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2372 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433656536353132636536376162346663346333663931393265353035 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit: BPF prog-id=116 op=LOAD Jul 15 11:19:55.783000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2372 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433656536353132636536376162346663346333663931393265353035 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit: BPF prog-id=117 op=LOAD Jul 15 11:19:55.783000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2372 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433656536353132636536376162346663346333663931393265353035 Jul 15 11:19:55.783000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:19:55.783000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { perfmon } for pid=2382 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit[2382]: AVC avc: denied { bpf } for pid=2382 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:55.783000 audit: BPF prog-id=118 op=LOAD Jul 15 11:19:55.783000 audit[2382]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2372 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:55.783000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3433656536353132636536376162346663346333663931393265353035 Jul 15 11:19:55.795739 kubelet[1951]: I0715 11:19:55.795015 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2hmdl\" (UniqueName: \"kubernetes.io/projected/368fe74c-a374-419a-a30a-3c4de4765b77-kube-api-access-2hmdl\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795739 kubelet[1951]: I0715 11:19:55.795052 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-lib-modules\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795739 kubelet[1951]: I0715 11:19:55.795069 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-cni-log-dir\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795739 kubelet[1951]: I0715 11:19:55.795083 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-flexvol-driver-host\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795739 kubelet[1951]: I0715 11:19:55.795098 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/368fe74c-a374-419a-a30a-3c4de4765b77-node-certs\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795981 kubelet[1951]: I0715 11:19:55.795114 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/368fe74c-a374-419a-a30a-3c4de4765b77-tigera-ca-bundle\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795981 kubelet[1951]: I0715 11:19:55.795128 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-var-run-calico\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795981 kubelet[1951]: I0715 11:19:55.795144 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-xtables-lock\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795981 kubelet[1951]: I0715 11:19:55.795164 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-cni-bin-dir\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.795981 kubelet[1951]: I0715 11:19:55.795179 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-var-lib-calico\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.796095 kubelet[1951]: I0715 11:19:55.795195 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-policysync\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.796095 kubelet[1951]: I0715 11:19:55.795210 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/368fe74c-a374-419a-a30a-3c4de4765b77-cni-net-dir\") pod \"calico-node-2f8ss\" (UID: \"368fe74c-a374-419a-a30a-3c4de4765b77\") " pod="calico-system/calico-node-2f8ss" Jul 15 11:19:55.804618 env[1219]: time="2025-07-15T11:19:55.804582839Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-56b9d87976-ftpwz,Uid:1cc45ae6-4e05-49b9-b6c4-d50fd4dd0dd7,Namespace:calico-system,Attempt:0,} returns sandbox id \"43ee6512ce67ab4fc4c3f9192e5052e42239eee681aa04a3452ca4f305271792\"" Jul 15 11:19:55.805889 kubelet[1951]: E0715 11:19:55.805355 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:55.806721 env[1219]: time="2025-07-15T11:19:55.806690784Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:19:55.896745 kubelet[1951]: E0715 11:19:55.896714 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.896745 kubelet[1951]: W0715 11:19:55.896735 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.896937 kubelet[1951]: E0715 11:19:55.896761 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.897119 kubelet[1951]: E0715 11:19:55.897100 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.897119 kubelet[1951]: W0715 11:19:55.897114 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.897212 kubelet[1951]: E0715 11:19:55.897129 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.897388 kubelet[1951]: E0715 11:19:55.897354 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.897388 kubelet[1951]: W0715 11:19:55.897371 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.897388 kubelet[1951]: E0715 11:19:55.897382 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.897652 kubelet[1951]: E0715 11:19:55.897634 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.897652 kubelet[1951]: W0715 11:19:55.897647 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.897822 kubelet[1951]: E0715 11:19:55.897732 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.898549 kubelet[1951]: E0715 11:19:55.898527 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.898549 kubelet[1951]: W0715 11:19:55.898544 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.898681 kubelet[1951]: E0715 11:19:55.898655 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.899104 kubelet[1951]: E0715 11:19:55.899075 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.899104 kubelet[1951]: W0715 11:19:55.899093 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.899224 kubelet[1951]: E0715 11:19:55.899187 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.899437 kubelet[1951]: E0715 11:19:55.899287 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.899437 kubelet[1951]: W0715 11:19:55.899301 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.899437 kubelet[1951]: E0715 11:19:55.899393 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.899790 kubelet[1951]: E0715 11:19:55.899768 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.899790 kubelet[1951]: W0715 11:19:55.899785 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.899933 kubelet[1951]: E0715 11:19:55.899912 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.900721 kubelet[1951]: E0715 11:19:55.900692 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.900721 kubelet[1951]: W0715 11:19:55.900712 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.900866 kubelet[1951]: E0715 11:19:55.900846 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.901040 kubelet[1951]: E0715 11:19:55.901022 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.901040 kubelet[1951]: W0715 11:19:55.901038 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.901136 kubelet[1951]: E0715 11:19:55.901119 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.901285 kubelet[1951]: E0715 11:19:55.901269 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.901285 kubelet[1951]: W0715 11:19:55.901284 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.901382 kubelet[1951]: E0715 11:19:55.901364 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.901946 kubelet[1951]: E0715 11:19:55.901916 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.901946 kubelet[1951]: W0715 11:19:55.901936 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.902050 kubelet[1951]: E0715 11:19:55.902031 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.902156 kubelet[1951]: E0715 11:19:55.902141 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.902156 kubelet[1951]: W0715 11:19:55.902152 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.902243 kubelet[1951]: E0715 11:19:55.902225 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.902573 kubelet[1951]: E0715 11:19:55.902540 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.902573 kubelet[1951]: W0715 11:19:55.902569 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.902683 kubelet[1951]: E0715 11:19:55.902664 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.902757 kubelet[1951]: E0715 11:19:55.902742 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.902757 kubelet[1951]: W0715 11:19:55.902753 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.902853 kubelet[1951]: E0715 11:19:55.902838 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.902914 kubelet[1951]: E0715 11:19:55.902901 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.902914 kubelet[1951]: W0715 11:19:55.902910 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.902995 kubelet[1951]: E0715 11:19:55.902980 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.903107 kubelet[1951]: E0715 11:19:55.903090 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.903107 kubelet[1951]: W0715 11:19:55.903102 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.903164 kubelet[1951]: E0715 11:19:55.903113 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.903327 kubelet[1951]: E0715 11:19:55.903309 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.903327 kubelet[1951]: W0715 11:19:55.903321 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.903391 kubelet[1951]: E0715 11:19:55.903330 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.903491 kubelet[1951]: E0715 11:19:55.903474 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.903491 kubelet[1951]: W0715 11:19:55.903485 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.903549 kubelet[1951]: E0715 11:19:55.903496 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.903672 kubelet[1951]: E0715 11:19:55.903656 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.903672 kubelet[1951]: W0715 11:19:55.903666 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.903733 kubelet[1951]: E0715 11:19:55.903674 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.904017 kubelet[1951]: E0715 11:19:55.903997 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.904017 kubelet[1951]: W0715 11:19:55.904012 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.904097 kubelet[1951]: E0715 11:19:55.904028 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.904235 kubelet[1951]: E0715 11:19:55.904220 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.904235 kubelet[1951]: W0715 11:19:55.904232 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.904301 kubelet[1951]: E0715 11:19:55.904242 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.904427 kubelet[1951]: E0715 11:19:55.904409 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.904427 kubelet[1951]: W0715 11:19:55.904420 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.904427 kubelet[1951]: E0715 11:19:55.904428 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:55.912917 kubelet[1951]: E0715 11:19:55.912888 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:55.912917 kubelet[1951]: W0715 11:19:55.912907 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:55.912917 kubelet[1951]: E0715 11:19:55.912919 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.023497 kubelet[1951]: E0715 11:19:56.023450 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-456pj" podUID="96ed7aff-ca57-4e30-a201-f756b40d3f77" Jul 15 11:19:56.043466 env[1219]: time="2025-07-15T11:19:56.043423163Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2f8ss,Uid:368fe74c-a374-419a-a30a-3c4de4765b77,Namespace:calico-system,Attempt:0,}" Jul 15 11:19:56.057640 env[1219]: time="2025-07-15T11:19:56.057452093Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:19:56.057640 env[1219]: time="2025-07-15T11:19:56.057493572Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:19:56.057640 env[1219]: time="2025-07-15T11:19:56.057512412Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:19:56.057848 env[1219]: time="2025-07-15T11:19:56.057671688Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b pid=2438 runtime=io.containerd.runc.v2 Jul 15 11:19:56.069743 systemd[1]: Started cri-containerd-6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b.scope. Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.092386 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093269 kubelet[1951]: W0715 11:19:56.092407 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.092426 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.092667 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093269 kubelet[1951]: W0715 11:19:56.092677 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.092687 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.093014 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093269 kubelet[1951]: W0715 11:19:56.093024 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.093038 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.093269 kubelet[1951]: E0715 11:19:56.093199 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093608 kubelet[1951]: W0715 11:19:56.093208 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.093608 kubelet[1951]: E0715 11:19:56.093217 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.093608 kubelet[1951]: E0715 11:19:56.093416 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093608 kubelet[1951]: W0715 11:19:56.093427 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.093608 kubelet[1951]: E0715 11:19:56.093437 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.093824 kubelet[1951]: E0715 11:19:56.093676 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093824 kubelet[1951]: W0715 11:19:56.093688 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.093824 kubelet[1951]: E0715 11:19:56.093698 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.093950 kubelet[1951]: E0715 11:19:56.093932 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.093950 kubelet[1951]: W0715 11:19:56.093948 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.094002 kubelet[1951]: E0715 11:19:56.093958 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.094128 kubelet[1951]: E0715 11:19:56.094115 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.094156 kubelet[1951]: W0715 11:19:56.094129 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.094156 kubelet[1951]: E0715 11:19:56.094139 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.094854 kubelet[1951]: E0715 11:19:56.094304 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.094854 kubelet[1951]: W0715 11:19:56.094319 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.094854 kubelet[1951]: E0715 11:19:56.094328 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.094000 audit: BPF prog-id=119 op=LOAD Jul 15 11:19:56.096158 kubelet[1951]: E0715 11:19:56.096064 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.096158 kubelet[1951]: W0715 11:19:56.096156 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.096228 kubelet[1951]: E0715 11:19:56.096170 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.096455 kubelet[1951]: E0715 11:19:56.096439 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.096455 kubelet[1951]: W0715 11:19:56.096453 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.096515 kubelet[1951]: E0715 11:19:56.096464 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.096716 kubelet[1951]: E0715 11:19:56.096690 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.096716 kubelet[1951]: W0715 11:19:56.096706 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.096716 kubelet[1951]: E0715 11:19:56.096717 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2438 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353866663061353464303238366538326434383635303939643836 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2438 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353866663061353464303238366538326434383635303939643836 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit: BPF prog-id=120 op=LOAD Jul 15 11:19:56.096000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2438 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353866663061353464303238366538326434383635303939643836 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit: BPF prog-id=121 op=LOAD Jul 15 11:19:56.096000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2438 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353866663061353464303238366538326434383635303939643836 Jul 15 11:19:56.096000 audit: BPF prog-id=121 op=UNLOAD Jul 15 11:19:56.096000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { perfmon } for pid=2447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit[2447]: AVC avc: denied { bpf } for pid=2447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:56.096000 audit: BPF prog-id=122 op=LOAD Jul 15 11:19:56.096000 audit[2447]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2438 pid=2447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3637353866663061353464303238366538326434383635303939643836 Jul 15 11:19:56.098330 kubelet[1951]: E0715 11:19:56.097099 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.098330 kubelet[1951]: W0715 11:19:56.097111 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.098330 kubelet[1951]: E0715 11:19:56.097122 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.098330 kubelet[1951]: E0715 11:19:56.097601 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.098330 kubelet[1951]: W0715 11:19:56.097612 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.098330 kubelet[1951]: E0715 11:19:56.097623 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.098683 kubelet[1951]: E0715 11:19:56.098652 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.098683 kubelet[1951]: W0715 11:19:56.098675 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.098734 kubelet[1951]: E0715 11:19:56.098688 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.099134 kubelet[1951]: E0715 11:19:56.099117 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.099134 kubelet[1951]: W0715 11:19:56.099132 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.099247 kubelet[1951]: E0715 11:19:56.099142 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.099458 kubelet[1951]: E0715 11:19:56.099426 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.099458 kubelet[1951]: W0715 11:19:56.099442 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.099458 kubelet[1951]: E0715 11:19:56.099452 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.099686 kubelet[1951]: E0715 11:19:56.099673 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.099686 kubelet[1951]: W0715 11:19:56.099685 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.099744 kubelet[1951]: E0715 11:19:56.099695 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.100145 kubelet[1951]: E0715 11:19:56.100117 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.100145 kubelet[1951]: W0715 11:19:56.100133 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.100145 kubelet[1951]: E0715 11:19:56.100146 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.101463 kubelet[1951]: E0715 11:19:56.101441 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.101463 kubelet[1951]: W0715 11:19:56.101458 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.101575 kubelet[1951]: E0715 11:19:56.101472 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.102009 kubelet[1951]: E0715 11:19:56.101988 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.102009 kubelet[1951]: W0715 11:19:56.102004 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.102101 kubelet[1951]: E0715 11:19:56.102016 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.102101 kubelet[1951]: I0715 11:19:56.102042 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/96ed7aff-ca57-4e30-a201-f756b40d3f77-registration-dir\") pod \"csi-node-driver-456pj\" (UID: \"96ed7aff-ca57-4e30-a201-f756b40d3f77\") " pod="calico-system/csi-node-driver-456pj" Jul 15 11:19:56.102323 kubelet[1951]: E0715 11:19:56.102218 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.102323 kubelet[1951]: W0715 11:19:56.102231 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.102323 kubelet[1951]: E0715 11:19:56.102240 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.102323 kubelet[1951]: I0715 11:19:56.102258 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/96ed7aff-ca57-4e30-a201-f756b40d3f77-varrun\") pod \"csi-node-driver-456pj\" (UID: \"96ed7aff-ca57-4e30-a201-f756b40d3f77\") " pod="calico-system/csi-node-driver-456pj" Jul 15 11:19:56.102619 kubelet[1951]: E0715 11:19:56.102496 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.102619 kubelet[1951]: W0715 11:19:56.102514 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.102619 kubelet[1951]: E0715 11:19:56.102530 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.102941 kubelet[1951]: E0715 11:19:56.102791 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.102941 kubelet[1951]: W0715 11:19:56.102804 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.102941 kubelet[1951]: E0715 11:19:56.102828 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.103272 kubelet[1951]: E0715 11:19:56.103117 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.103272 kubelet[1951]: W0715 11:19:56.103129 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.103272 kubelet[1951]: E0715 11:19:56.103145 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.103272 kubelet[1951]: I0715 11:19:56.103165 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/96ed7aff-ca57-4e30-a201-f756b40d3f77-kubelet-dir\") pod \"csi-node-driver-456pj\" (UID: \"96ed7aff-ca57-4e30-a201-f756b40d3f77\") " pod="calico-system/csi-node-driver-456pj" Jul 15 11:19:56.103619 kubelet[1951]: E0715 11:19:56.103467 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.103619 kubelet[1951]: W0715 11:19:56.103481 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.103619 kubelet[1951]: E0715 11:19:56.103497 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.103619 kubelet[1951]: I0715 11:19:56.103513 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tqjt7\" (UniqueName: \"kubernetes.io/projected/96ed7aff-ca57-4e30-a201-f756b40d3f77-kube-api-access-tqjt7\") pod \"csi-node-driver-456pj\" (UID: \"96ed7aff-ca57-4e30-a201-f756b40d3f77\") " pod="calico-system/csi-node-driver-456pj" Jul 15 11:19:56.104156 kubelet[1951]: E0715 11:19:56.103805 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.104156 kubelet[1951]: W0715 11:19:56.103867 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.104156 kubelet[1951]: E0715 11:19:56.103961 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.104156 kubelet[1951]: I0715 11:19:56.103984 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/96ed7aff-ca57-4e30-a201-f756b40d3f77-socket-dir\") pod \"csi-node-driver-456pj\" (UID: \"96ed7aff-ca57-4e30-a201-f756b40d3f77\") " pod="calico-system/csi-node-driver-456pj" Jul 15 11:19:56.104156 kubelet[1951]: E0715 11:19:56.104068 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.104156 kubelet[1951]: W0715 11:19:56.104075 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.104156 kubelet[1951]: E0715 11:19:56.104103 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.104527 kubelet[1951]: E0715 11:19:56.104423 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.104527 kubelet[1951]: W0715 11:19:56.104436 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.104527 kubelet[1951]: E0715 11:19:56.104449 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.104806 kubelet[1951]: E0715 11:19:56.104698 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.104806 kubelet[1951]: W0715 11:19:56.104711 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.104806 kubelet[1951]: E0715 11:19:56.104724 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.106884 kubelet[1951]: E0715 11:19:56.105718 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.106884 kubelet[1951]: W0715 11:19:56.105734 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.106884 kubelet[1951]: E0715 11:19:56.105749 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.108064 kubelet[1951]: E0715 11:19:56.107943 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.108064 kubelet[1951]: W0715 11:19:56.107959 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.108064 kubelet[1951]: E0715 11:19:56.107972 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.108603 kubelet[1951]: E0715 11:19:56.108383 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.108603 kubelet[1951]: W0715 11:19:56.108395 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.108603 kubelet[1951]: E0715 11:19:56.108407 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.108870 kubelet[1951]: E0715 11:19:56.108756 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.108870 kubelet[1951]: W0715 11:19:56.108770 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.108870 kubelet[1951]: E0715 11:19:56.108781 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.109374 kubelet[1951]: E0715 11:19:56.109321 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.109374 kubelet[1951]: W0715 11:19:56.109336 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.109374 kubelet[1951]: E0715 11:19:56.109349 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.116514 env[1219]: time="2025-07-15T11:19:56.116469824Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2f8ss,Uid:368fe74c-a374-419a-a30a-3c4de4765b77,Namespace:calico-system,Attempt:0,} returns sandbox id \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\"" Jul 15 11:19:56.204788 kubelet[1951]: E0715 11:19:56.204633 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.204788 kubelet[1951]: W0715 11:19:56.204658 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.204788 kubelet[1951]: E0715 11:19:56.204676 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.205236 kubelet[1951]: E0715 11:19:56.205078 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.205236 kubelet[1951]: W0715 11:19:56.205093 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.205236 kubelet[1951]: E0715 11:19:56.205116 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.205586 kubelet[1951]: E0715 11:19:56.205432 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.205586 kubelet[1951]: W0715 11:19:56.205445 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.205586 kubelet[1951]: E0715 11:19:56.205465 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.205938 kubelet[1951]: E0715 11:19:56.205765 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.205938 kubelet[1951]: W0715 11:19:56.205778 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.205938 kubelet[1951]: E0715 11:19:56.205792 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.206247 kubelet[1951]: E0715 11:19:56.206118 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.206247 kubelet[1951]: W0715 11:19:56.206134 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.206247 kubelet[1951]: E0715 11:19:56.206155 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.206515 kubelet[1951]: E0715 11:19:56.206412 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.206515 kubelet[1951]: W0715 11:19:56.206426 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.206515 kubelet[1951]: E0715 11:19:56.206482 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.206795 kubelet[1951]: E0715 11:19:56.206690 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.206795 kubelet[1951]: W0715 11:19:56.206702 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.206795 kubelet[1951]: E0715 11:19:56.206757 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.207083 kubelet[1951]: E0715 11:19:56.206983 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.207083 kubelet[1951]: W0715 11:19:56.206994 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.207083 kubelet[1951]: E0715 11:19:56.207045 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.207355 kubelet[1951]: E0715 11:19:56.207251 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.207355 kubelet[1951]: W0715 11:19:56.207263 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.207355 kubelet[1951]: E0715 11:19:56.207320 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.207626 kubelet[1951]: E0715 11:19:56.207513 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.207626 kubelet[1951]: W0715 11:19:56.207524 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.207626 kubelet[1951]: E0715 11:19:56.207583 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.207906 kubelet[1951]: E0715 11:19:56.207784 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.207906 kubelet[1951]: W0715 11:19:56.207795 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.207906 kubelet[1951]: E0715 11:19:56.207833 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.208179 kubelet[1951]: E0715 11:19:56.208070 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.208179 kubelet[1951]: W0715 11:19:56.208081 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.208179 kubelet[1951]: E0715 11:19:56.208106 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.208448 kubelet[1951]: E0715 11:19:56.208341 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.208448 kubelet[1951]: W0715 11:19:56.208354 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.208448 kubelet[1951]: E0715 11:19:56.208377 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.208717 kubelet[1951]: E0715 11:19:56.208615 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.208717 kubelet[1951]: W0715 11:19:56.208625 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.208717 kubelet[1951]: E0715 11:19:56.208649 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.209055 kubelet[1951]: E0715 11:19:56.208919 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.209055 kubelet[1951]: W0715 11:19:56.208929 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.209055 kubelet[1951]: E0715 11:19:56.208952 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.209321 kubelet[1951]: E0715 11:19:56.209217 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.209321 kubelet[1951]: W0715 11:19:56.209228 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.209321 kubelet[1951]: E0715 11:19:56.209253 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.209643 kubelet[1951]: E0715 11:19:56.209538 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.209643 kubelet[1951]: W0715 11:19:56.209559 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.209643 kubelet[1951]: E0715 11:19:56.209592 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.209817 kubelet[1951]: E0715 11:19:56.209795 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.209982 kubelet[1951]: W0715 11:19:56.209888 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.209982 kubelet[1951]: E0715 11:19:56.209922 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.210122 kubelet[1951]: E0715 11:19:56.210109 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.210181 kubelet[1951]: W0715 11:19:56.210170 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.210286 kubelet[1951]: E0715 11:19:56.210265 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.210522 kubelet[1951]: E0715 11:19:56.210507 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.210609 kubelet[1951]: W0715 11:19:56.210594 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.210938 kubelet[1951]: E0715 11:19:56.210923 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.211069 kubelet[1951]: W0715 11:19:56.211055 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.211156 kubelet[1951]: E0715 11:19:56.211144 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.211249 kubelet[1951]: E0715 11:19:56.210928 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.211618 kubelet[1951]: E0715 11:19:56.211603 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.211618 kubelet[1951]: W0715 11:19:56.211618 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.211695 kubelet[1951]: E0715 11:19:56.211635 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.212912 kubelet[1951]: E0715 11:19:56.212888 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.212912 kubelet[1951]: W0715 11:19:56.212907 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.212991 kubelet[1951]: E0715 11:19:56.212924 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.213159 kubelet[1951]: E0715 11:19:56.213133 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.213159 kubelet[1951]: W0715 11:19:56.213150 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.213217 kubelet[1951]: E0715 11:19:56.213160 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.213391 kubelet[1951]: E0715 11:19:56.213366 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.213391 kubelet[1951]: W0715 11:19:56.213380 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.213391 kubelet[1951]: E0715 11:19:56.213390 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.219371 kubelet[1951]: E0715 11:19:56.219354 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:56.219476 kubelet[1951]: W0715 11:19:56.219462 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:56.219553 kubelet[1951]: E0715 11:19:56.219533 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:56.433000 audit[2534]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2534 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:56.433000 audit[2534]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=fffffa7bc190 a2=0 a3=1 items=0 ppid=2062 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.433000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:56.443000 audit[2534]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2534 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:56.443000 audit[2534]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=fffffa7bc190 a2=0 a3=1 items=0 ppid=2062 pid=2534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:56.443000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:56.876547 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3839480137.mount: Deactivated successfully. Jul 15 11:19:57.690838 env[1219]: time="2025-07-15T11:19:57.690748324Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:57.692684 env[1219]: time="2025-07-15T11:19:57.692615560Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:57.694408 env[1219]: time="2025-07-15T11:19:57.694070246Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:57.695364 env[1219]: time="2025-07-15T11:19:57.695328456Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:57.695841 env[1219]: time="2025-07-15T11:19:57.695791565Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 15 11:19:57.702020 env[1219]: time="2025-07-15T11:19:57.701962179Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:19:57.726454 env[1219]: time="2025-07-15T11:19:57.726418799Z" level=info msg="CreateContainer within sandbox \"43ee6512ce67ab4fc4c3f9192e5052e42239eee681aa04a3452ca4f305271792\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:19:57.739039 env[1219]: time="2025-07-15T11:19:57.738983741Z" level=info msg="CreateContainer within sandbox \"43ee6512ce67ab4fc4c3f9192e5052e42239eee681aa04a3452ca4f305271792\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"a2b27561df5dc47c7c3d628ae830d9105d59141f6cfdce95e03918eb0c1dced0\"" Jul 15 11:19:57.740132 env[1219]: time="2025-07-15T11:19:57.739752123Z" level=info msg="StartContainer for \"a2b27561df5dc47c7c3d628ae830d9105d59141f6cfdce95e03918eb0c1dced0\"" Jul 15 11:19:57.767282 systemd[1]: Started cri-containerd-a2b27561df5dc47c7c3d628ae830d9105d59141f6cfdce95e03918eb0c1dced0.scope. Jul 15 11:19:57.802003 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 15 11:19:57.802099 kernel: audit: type=1400 audit(1752578397.800:971): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806547 kernel: audit: type=1400 audit(1752578397.800:972): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806596 kernel: audit: type=1400 audit(1752578397.800:973): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.811232 kernel: audit: type=1400 audit(1752578397.800:974): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.811280 kernel: audit: type=1400 audit(1752578397.800:975): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.815273 kernel: audit: type=1400 audit(1752578397.800:976): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.818530 kernel: audit: type=1400 audit(1752578397.800:977): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.818594 kernel: audit: type=1400 audit(1752578397.800:978): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.800000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.823091 kernel: audit: type=1400 audit(1752578397.800:979): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.823142 kernel: audit: type=1400 audit(1752578397.801:980): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit: BPF prog-id=123 op=LOAD Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2372 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:57.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623237353631646635646334376337633364363238616538333064 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2372 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:57.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623237353631646635646334376337633364363238616538333064 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.801000 audit: BPF prog-id=124 op=LOAD Jul 15 11:19:57.801000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2372 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:57.801000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623237353631646635646334376337633364363238616538333064 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.803000 audit: BPF prog-id=125 op=LOAD Jul 15 11:19:57.803000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2372 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:57.803000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623237353631646635646334376337633364363238616538333064 Jul 15 11:19:57.806000 audit: BPF prog-id=125 op=UNLOAD Jul 15 11:19:57.806000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { perfmon } for pid=2545 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit[2545]: AVC avc: denied { bpf } for pid=2545 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:57.806000 audit: BPF prog-id=126 op=LOAD Jul 15 11:19:57.806000 audit[2545]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2372 pid=2545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:57.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6132623237353631646635646334376337633364363238616538333064 Jul 15 11:19:57.865209 env[1219]: time="2025-07-15T11:19:57.865157949Z" level=info msg="StartContainer for \"a2b27561df5dc47c7c3d628ae830d9105d59141f6cfdce95e03918eb0c1dced0\" returns successfully" Jul 15 11:19:57.881178 kubelet[1951]: E0715 11:19:57.881137 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-456pj" podUID="96ed7aff-ca57-4e30-a201-f756b40d3f77" Jul 15 11:19:57.932258 kubelet[1951]: E0715 11:19:57.932228 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:57.949415 kubelet[1951]: I0715 11:19:57.949285 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-56b9d87976-ftpwz" podStartSLOduration=1.054070759 podStartE2EDuration="2.949268995s" podCreationTimestamp="2025-07-15 11:19:55 +0000 UTC" firstStartedPulling="2025-07-15 11:19:55.806363112 +0000 UTC m=+17.015372048" lastFinishedPulling="2025-07-15 11:19:57.701561348 +0000 UTC m=+18.910570284" observedRunningTime="2025-07-15 11:19:57.94864333 +0000 UTC m=+19.157652266" watchObservedRunningTime="2025-07-15 11:19:57.949268995 +0000 UTC m=+19.158277971" Jul 15 11:19:58.016732 kubelet[1951]: E0715 11:19:58.016694 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.016732 kubelet[1951]: W0715 11:19:58.016718 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.016732 kubelet[1951]: E0715 11:19:58.016739 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.016957 kubelet[1951]: E0715 11:19:58.016936 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.016957 kubelet[1951]: W0715 11:19:58.016951 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.017030 kubelet[1951]: E0715 11:19:58.016962 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.017899 kubelet[1951]: E0715 11:19:58.017875 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.017899 kubelet[1951]: W0715 11:19:58.017900 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.018028 kubelet[1951]: E0715 11:19:58.017915 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.018164 kubelet[1951]: E0715 11:19:58.018148 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.018164 kubelet[1951]: W0715 11:19:58.018161 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.018244 kubelet[1951]: E0715 11:19:58.018171 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.019950 kubelet[1951]: E0715 11:19:58.019915 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.019950 kubelet[1951]: W0715 11:19:58.019945 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.020072 kubelet[1951]: E0715 11:19:58.019959 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.020213 kubelet[1951]: E0715 11:19:58.020197 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.020213 kubelet[1951]: W0715 11:19:58.020211 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.020284 kubelet[1951]: E0715 11:19:58.020222 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.021316 kubelet[1951]: E0715 11:19:58.021292 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.021394 kubelet[1951]: W0715 11:19:58.021326 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.021394 kubelet[1951]: E0715 11:19:58.021340 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.021596 kubelet[1951]: E0715 11:19:58.021579 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.021596 kubelet[1951]: W0715 11:19:58.021592 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.021678 kubelet[1951]: E0715 11:19:58.021602 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.021898 kubelet[1951]: E0715 11:19:58.021882 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.021898 kubelet[1951]: W0715 11:19:58.021895 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.021984 kubelet[1951]: E0715 11:19:58.021906 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.022148 kubelet[1951]: E0715 11:19:58.022133 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.022148 kubelet[1951]: W0715 11:19:58.022147 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.022235 kubelet[1951]: E0715 11:19:58.022157 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.022384 kubelet[1951]: E0715 11:19:58.022370 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.022384 kubelet[1951]: W0715 11:19:58.022382 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.022455 kubelet[1951]: E0715 11:19:58.022391 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.022620 kubelet[1951]: E0715 11:19:58.022605 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.022620 kubelet[1951]: W0715 11:19:58.022617 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.022714 kubelet[1951]: E0715 11:19:58.022627 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.022955 kubelet[1951]: E0715 11:19:58.022939 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.022955 kubelet[1951]: W0715 11:19:58.022954 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.023042 kubelet[1951]: E0715 11:19:58.022965 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.023196 kubelet[1951]: E0715 11:19:58.023181 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.023196 kubelet[1951]: W0715 11:19:58.023193 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.023279 kubelet[1951]: E0715 11:19:58.023203 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.023424 kubelet[1951]: E0715 11:19:58.023411 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.023424 kubelet[1951]: W0715 11:19:58.023422 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.023511 kubelet[1951]: E0715 11:19:58.023432 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.023745 kubelet[1951]: E0715 11:19:58.023729 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.023745 kubelet[1951]: W0715 11:19:58.023742 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.023893 kubelet[1951]: E0715 11:19:58.023753 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.025932 kubelet[1951]: E0715 11:19:58.025907 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.025932 kubelet[1951]: W0715 11:19:58.025925 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.026036 kubelet[1951]: E0715 11:19:58.025943 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.026283 kubelet[1951]: E0715 11:19:58.026265 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.026283 kubelet[1951]: W0715 11:19:58.026281 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.026421 kubelet[1951]: E0715 11:19:58.026397 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.027005 kubelet[1951]: E0715 11:19:58.026986 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.027005 kubelet[1951]: W0715 11:19:58.027001 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.027146 kubelet[1951]: E0715 11:19:58.027128 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.027333 kubelet[1951]: E0715 11:19:58.027318 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.027333 kubelet[1951]: W0715 11:19:58.027330 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.027424 kubelet[1951]: E0715 11:19:58.027344 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.027897 kubelet[1951]: E0715 11:19:58.027878 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.027897 kubelet[1951]: W0715 11:19:58.027893 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.027997 kubelet[1951]: E0715 11:19:58.027909 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.028332 kubelet[1951]: E0715 11:19:58.028314 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.028332 kubelet[1951]: W0715 11:19:58.028328 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.028462 kubelet[1951]: E0715 11:19:58.028444 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.028669 kubelet[1951]: E0715 11:19:58.028649 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.028669 kubelet[1951]: W0715 11:19:58.028665 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.028786 kubelet[1951]: E0715 11:19:58.028768 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.030945 kubelet[1951]: E0715 11:19:58.030921 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.030945 kubelet[1951]: W0715 11:19:58.030939 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.031071 kubelet[1951]: E0715 11:19:58.030980 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.032929 kubelet[1951]: E0715 11:19:58.032904 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.032929 kubelet[1951]: W0715 11:19:58.032922 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.033080 kubelet[1951]: E0715 11:19:58.033062 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.034949 kubelet[1951]: E0715 11:19:58.034926 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.034949 kubelet[1951]: W0715 11:19:58.034944 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.035113 kubelet[1951]: E0715 11:19:58.035094 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.035314 kubelet[1951]: E0715 11:19:58.035295 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.035314 kubelet[1951]: W0715 11:19:58.035311 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.035420 kubelet[1951]: E0715 11:19:58.035405 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.035607 kubelet[1951]: E0715 11:19:58.035587 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.035607 kubelet[1951]: W0715 11:19:58.035602 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.035694 kubelet[1951]: E0715 11:19:58.035669 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.036167 kubelet[1951]: E0715 11:19:58.036127 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.036167 kubelet[1951]: W0715 11:19:58.036142 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.036167 kubelet[1951]: E0715 11:19:58.036159 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.036445 kubelet[1951]: E0715 11:19:58.036428 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.036445 kubelet[1951]: W0715 11:19:58.036442 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.036539 kubelet[1951]: E0715 11:19:58.036452 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.036881 kubelet[1951]: E0715 11:19:58.036862 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.036881 kubelet[1951]: W0715 11:19:58.036877 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.037023 kubelet[1951]: E0715 11:19:58.037005 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.038938 kubelet[1951]: E0715 11:19:58.038914 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.038938 kubelet[1951]: W0715 11:19:58.038932 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.039028 kubelet[1951]: E0715 11:19:58.038948 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.039291 kubelet[1951]: E0715 11:19:58.039274 1951 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:19:58.039291 kubelet[1951]: W0715 11:19:58.039288 1951 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:19:58.039375 kubelet[1951]: E0715 11:19:58.039299 1951 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:19:58.698941 env[1219]: time="2025-07-15T11:19:58.698876479Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:58.700336 env[1219]: time="2025-07-15T11:19:58.700307767Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:58.701649 env[1219]: time="2025-07-15T11:19:58.701614217Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:58.703100 env[1219]: time="2025-07-15T11:19:58.703071504Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:19:58.703455 env[1219]: time="2025-07-15T11:19:58.703428896Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 15 11:19:58.707742 env[1219]: time="2025-07-15T11:19:58.707705200Z" level=info msg="CreateContainer within sandbox \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:19:58.719218 env[1219]: time="2025-07-15T11:19:58.718917746Z" level=info msg="CreateContainer within sandbox \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a\"" Jul 15 11:19:58.719726 env[1219]: time="2025-07-15T11:19:58.719699809Z" level=info msg="StartContainer for \"5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a\"" Jul 15 11:19:58.743513 systemd[1]: Started cri-containerd-5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a.scope. Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2438 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:58.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323061336234643065643261366561333663356337343261633665 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit: BPF prog-id=127 op=LOAD Jul 15 11:19:58.762000 audit[2620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2438 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:58.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323061336234643065643261366561333663356337343261633665 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit: BPF prog-id=128 op=LOAD Jul 15 11:19:58.762000 audit[2620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2438 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:58.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323061336234643065643261366561333663356337343261633665 Jul 15 11:19:58.762000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:19:58.762000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { perfmon } for pid=2620 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit[2620]: AVC avc: denied { bpf } for pid=2620 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:19:58.762000 audit: BPF prog-id=129 op=LOAD Jul 15 11:19:58.762000 audit[2620]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2438 pid=2620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:58.762000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539323061336234643065643261366561333663356337343261633665 Jul 15 11:19:58.776479 env[1219]: time="2025-07-15T11:19:58.776418447Z" level=info msg="StartContainer for \"5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a\" returns successfully" Jul 15 11:19:58.793187 systemd[1]: cri-containerd-5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a.scope: Deactivated successfully. Jul 15 11:19:58.798000 audit: BPF prog-id=129 op=UNLOAD Jul 15 11:19:58.811937 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a-rootfs.mount: Deactivated successfully. Jul 15 11:19:58.841537 env[1219]: time="2025-07-15T11:19:58.841484577Z" level=info msg="shim disconnected" id=5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a Jul 15 11:19:58.841537 env[1219]: time="2025-07-15T11:19:58.841539456Z" level=warning msg="cleaning up after shim disconnected" id=5920a3b4d0ed2a6ea36c5c742ac6ee169b7e68fa2070dd26abb6ccc32c943a1a namespace=k8s.io Jul 15 11:19:58.841537 env[1219]: time="2025-07-15T11:19:58.841549815Z" level=info msg="cleaning up dead shim" Jul 15 11:19:58.852171 env[1219]: time="2025-07-15T11:19:58.852123297Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:19:58Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2657 runtime=io.containerd.runc.v2\n" Jul 15 11:19:58.934723 kubelet[1951]: E0715 11:19:58.934671 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:19:58.936512 env[1219]: time="2025-07-15T11:19:58.936413352Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:19:58.972000 audit[2675]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:58.972000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe34083b0 a2=0 a3=1 items=0 ppid=2062 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:58.972000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:58.985000 audit[2675]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2675 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:19:58.985000 audit[2675]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe34083b0 a2=0 a3=1 items=0 ppid=2062 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:19:58.985000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:19:59.881516 kubelet[1951]: E0715 11:19:59.881458 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-456pj" podUID="96ed7aff-ca57-4e30-a201-f756b40d3f77" Jul 15 11:19:59.935958 kubelet[1951]: E0715 11:19:59.935877 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:00.940597 kubelet[1951]: E0715 11:20:00.939200 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:01.823282 env[1219]: time="2025-07-15T11:20:01.823226334Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:01.824733 env[1219]: time="2025-07-15T11:20:01.824693825Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:01.826253 env[1219]: time="2025-07-15T11:20:01.826217515Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:01.827579 env[1219]: time="2025-07-15T11:20:01.827553289Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:01.828708 env[1219]: time="2025-07-15T11:20:01.828671227Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 15 11:20:01.830595 env[1219]: time="2025-07-15T11:20:01.830559670Z" level=info msg="CreateContainer within sandbox \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:20:01.841130 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1354782115.mount: Deactivated successfully. Jul 15 11:20:01.843325 env[1219]: time="2025-07-15T11:20:01.843284140Z" level=info msg="CreateContainer within sandbox \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad\"" Jul 15 11:20:01.843988 env[1219]: time="2025-07-15T11:20:01.843944927Z" level=info msg="StartContainer for \"62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad\"" Jul 15 11:20:01.863860 systemd[1]: Started cri-containerd-62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad.scope. Jul 15 11:20:01.865454 systemd[1]: run-containerd-runc-k8s.io-62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad-runc.QE34D0.mount: Deactivated successfully. Jul 15 11:20:01.881297 kubelet[1951]: E0715 11:20:01.880957 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-456pj" podUID="96ed7aff-ca57-4e30-a201-f756b40d3f77" Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2438 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:01.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623635333563663732663066323261613934326366613061336562 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.895000 audit: BPF prog-id=130 op=LOAD Jul 15 11:20:01.895000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2438 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:01.895000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623635333563663732663066323261613934326366613061336562 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.896000 audit: BPF prog-id=131 op=LOAD Jul 15 11:20:01.896000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2438 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:01.896000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623635333563663732663066323261613934326366613061336562 Jul 15 11:20:01.897000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:20:01.897000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { perfmon } for pid=2689 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit[2689]: AVC avc: denied { bpf } for pid=2689 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:01.897000 audit: BPF prog-id=132 op=LOAD Jul 15 11:20:01.897000 audit[2689]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2438 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:01.897000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632623635333563663732663066323261613934326366613061336562 Jul 15 11:20:01.918714 env[1219]: time="2025-07-15T11:20:01.918660778Z" level=info msg="StartContainer for \"62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad\" returns successfully" Jul 15 11:20:02.504585 env[1219]: time="2025-07-15T11:20:02.504515579Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:20:02.506923 systemd[1]: cri-containerd-62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad.scope: Deactivated successfully. Jul 15 11:20:02.515000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:20:02.583757 kubelet[1951]: I0715 11:20:02.582987 1951 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 15 11:20:02.620599 env[1219]: time="2025-07-15T11:20:02.620546039Z" level=info msg="shim disconnected" id=62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad Jul 15 11:20:02.620599 env[1219]: time="2025-07-15T11:20:02.620594198Z" level=warning msg="cleaning up after shim disconnected" id=62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad namespace=k8s.io Jul 15 11:20:02.620599 env[1219]: time="2025-07-15T11:20:02.620603958Z" level=info msg="cleaning up dead shim" Jul 15 11:20:02.627624 env[1219]: time="2025-07-15T11:20:02.627581027Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:20:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2730 runtime=io.containerd.runc.v2\n" Jul 15 11:20:02.656214 systemd[1]: Created slice kubepods-burstable-pod10b9f436_677d_447b_8404_d1b1a0388753.slice. Jul 15 11:20:02.659992 kubelet[1951]: I0715 11:20:02.659767 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/21108302-e040-4ff9-9142-3ed8f4d8bfc8-goldmane-key-pair\") pod \"goldmane-58fd7646b9-wdnmw\" (UID: \"21108302-e040-4ff9-9142-3ed8f4d8bfc8\") " pod="calico-system/goldmane-58fd7646b9-wdnmw" Jul 15 11:20:02.659992 kubelet[1951]: I0715 11:20:02.659838 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vwtrl\" (UniqueName: \"kubernetes.io/projected/f799d7eb-bd88-46d2-8048-7018fcb4b99c-kube-api-access-vwtrl\") pod \"whisker-864b5bb44f-lwgnt\" (UID: \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\") " pod="calico-system/whisker-864b5bb44f-lwgnt" Jul 15 11:20:02.659992 kubelet[1951]: I0715 11:20:02.659865 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-r76jl\" (UniqueName: \"kubernetes.io/projected/10b9f436-677d-447b-8404-d1b1a0388753-kube-api-access-r76jl\") pod \"coredns-7c65d6cfc9-cpqd8\" (UID: \"10b9f436-677d-447b-8404-d1b1a0388753\") " pod="kube-system/coredns-7c65d6cfc9-cpqd8" Jul 15 11:20:02.659992 kubelet[1951]: I0715 11:20:02.659885 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-ca-bundle\") pod \"whisker-864b5bb44f-lwgnt\" (UID: \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\") " pod="calico-system/whisker-864b5bb44f-lwgnt" Jul 15 11:20:02.659992 kubelet[1951]: I0715 11:20:02.659901 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rz4q2\" (UniqueName: \"kubernetes.io/projected/3406aa9f-b094-4101-a7eb-585fe64d1723-kube-api-access-rz4q2\") pod \"coredns-7c65d6cfc9-mn59l\" (UID: \"3406aa9f-b094-4101-a7eb-585fe64d1723\") " pod="kube-system/coredns-7c65d6cfc9-mn59l" Jul 15 11:20:02.660222 kubelet[1951]: I0715 11:20:02.659920 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3406aa9f-b094-4101-a7eb-585fe64d1723-config-volume\") pod \"coredns-7c65d6cfc9-mn59l\" (UID: \"3406aa9f-b094-4101-a7eb-585fe64d1723\") " pod="kube-system/coredns-7c65d6cfc9-mn59l" Jul 15 11:20:02.660222 kubelet[1951]: I0715 11:20:02.659938 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/21108302-e040-4ff9-9142-3ed8f4d8bfc8-config\") pod \"goldmane-58fd7646b9-wdnmw\" (UID: \"21108302-e040-4ff9-9142-3ed8f4d8bfc8\") " pod="calico-system/goldmane-58fd7646b9-wdnmw" Jul 15 11:20:02.660222 kubelet[1951]: I0715 11:20:02.659953 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8czpd\" (UniqueName: \"kubernetes.io/projected/0bbb05f0-6922-4873-997d-efb6a051decc-kube-api-access-8czpd\") pod \"calico-kube-controllers-678dcc9b89-w9brg\" (UID: \"0bbb05f0-6922-4873-997d-efb6a051decc\") " pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" Jul 15 11:20:02.660222 kubelet[1951]: I0715 11:20:02.659970 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/0aa73792-5e92-42aa-b561-b947928db919-calico-apiserver-certs\") pod \"calico-apiserver-65795b46b6-7xgn9\" (UID: \"0aa73792-5e92-42aa-b561-b947928db919\") " pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" Jul 15 11:20:02.660222 kubelet[1951]: I0715 11:20:02.659987 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vdcvl\" (UniqueName: \"kubernetes.io/projected/21108302-e040-4ff9-9142-3ed8f4d8bfc8-kube-api-access-vdcvl\") pod \"goldmane-58fd7646b9-wdnmw\" (UID: \"21108302-e040-4ff9-9142-3ed8f4d8bfc8\") " pod="calico-system/goldmane-58fd7646b9-wdnmw" Jul 15 11:20:02.660353 kubelet[1951]: I0715 11:20:02.660003 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e99c048a-b44e-4e49-b8a2-60d71754b9a4-calico-apiserver-certs\") pod \"calico-apiserver-65795b46b6-75csc\" (UID: \"e99c048a-b44e-4e49-b8a2-60d71754b9a4\") " pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" Jul 15 11:20:02.660353 kubelet[1951]: I0715 11:20:02.660018 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cqpbq\" (UniqueName: \"kubernetes.io/projected/e99c048a-b44e-4e49-b8a2-60d71754b9a4-kube-api-access-cqpbq\") pod \"calico-apiserver-65795b46b6-75csc\" (UID: \"e99c048a-b44e-4e49-b8a2-60d71754b9a4\") " pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" Jul 15 11:20:02.660353 kubelet[1951]: I0715 11:20:02.660043 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/21108302-e040-4ff9-9142-3ed8f4d8bfc8-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-wdnmw\" (UID: \"21108302-e040-4ff9-9142-3ed8f4d8bfc8\") " pod="calico-system/goldmane-58fd7646b9-wdnmw" Jul 15 11:20:02.660353 kubelet[1951]: I0715 11:20:02.660059 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0bbb05f0-6922-4873-997d-efb6a051decc-tigera-ca-bundle\") pod \"calico-kube-controllers-678dcc9b89-w9brg\" (UID: \"0bbb05f0-6922-4873-997d-efb6a051decc\") " pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" Jul 15 11:20:02.660353 kubelet[1951]: I0715 11:20:02.660076 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-backend-key-pair\") pod \"whisker-864b5bb44f-lwgnt\" (UID: \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\") " pod="calico-system/whisker-864b5bb44f-lwgnt" Jul 15 11:20:02.660482 kubelet[1951]: I0715 11:20:02.660090 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/10b9f436-677d-447b-8404-d1b1a0388753-config-volume\") pod \"coredns-7c65d6cfc9-cpqd8\" (UID: \"10b9f436-677d-447b-8404-d1b1a0388753\") " pod="kube-system/coredns-7c65d6cfc9-cpqd8" Jul 15 11:20:02.660482 kubelet[1951]: I0715 11:20:02.660107 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-27vgd\" (UniqueName: \"kubernetes.io/projected/0aa73792-5e92-42aa-b561-b947928db919-kube-api-access-27vgd\") pod \"calico-apiserver-65795b46b6-7xgn9\" (UID: \"0aa73792-5e92-42aa-b561-b947928db919\") " pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" Jul 15 11:20:02.660609 systemd[1]: Created slice kubepods-burstable-pod3406aa9f_b094_4101_a7eb_585fe64d1723.slice. Jul 15 11:20:02.665418 systemd[1]: Created slice kubepods-besteffort-pod0aa73792_5e92_42aa_b561_b947928db919.slice. Jul 15 11:20:02.675132 systemd[1]: Created slice kubepods-besteffort-pod0bbb05f0_6922_4873_997d_efb6a051decc.slice. Jul 15 11:20:02.682700 systemd[1]: Created slice kubepods-besteffort-pod21108302_e040_4ff9_9142_3ed8f4d8bfc8.slice. Jul 15 11:20:02.686654 systemd[1]: Created slice kubepods-besteffort-pode99c048a_b44e_4e49_b8a2_60d71754b9a4.slice. Jul 15 11:20:02.690976 systemd[1]: Created slice kubepods-besteffort-podf799d7eb_bd88_46d2_8048_7018fcb4b99c.slice. Jul 15 11:20:02.847039 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-62b6535cf72f0f22aa942cfa0a3eb141447f4a44ab809d87422293e52f0670ad-rootfs.mount: Deactivated successfully. Jul 15 11:20:02.950523 env[1219]: time="2025-07-15T11:20:02.950480119Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:20:02.960152 kubelet[1951]: E0715 11:20:02.960014 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:02.961005 env[1219]: time="2025-07-15T11:20:02.960960002Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cpqd8,Uid:10b9f436-677d-447b-8404-d1b1a0388753,Namespace:kube-system,Attempt:0,}" Jul 15 11:20:02.965839 kubelet[1951]: E0715 11:20:02.962876 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:02.965930 env[1219]: time="2025-07-15T11:20:02.964740131Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mn59l,Uid:3406aa9f-b094-4101-a7eb-585fe64d1723,Namespace:kube-system,Attempt:0,}" Jul 15 11:20:02.970391 env[1219]: time="2025-07-15T11:20:02.970344706Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-7xgn9,Uid:0aa73792-5e92-42aa-b561-b947928db919,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:20:02.980987 env[1219]: time="2025-07-15T11:20:02.980943787Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-678dcc9b89-w9brg,Uid:0bbb05f0-6922-4873-997d-efb6a051decc,Namespace:calico-system,Attempt:0,}" Jul 15 11:20:02.987981 env[1219]: time="2025-07-15T11:20:02.986102410Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wdnmw,Uid:21108302-e040-4ff9-9142-3ed8f4d8bfc8,Namespace:calico-system,Attempt:0,}" Jul 15 11:20:02.990952 env[1219]: time="2025-07-15T11:20:02.990293491Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-75csc,Uid:e99c048a-b44e-4e49-b8a2-60d71754b9a4,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:20:02.999436 env[1219]: time="2025-07-15T11:20:02.998240422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-864b5bb44f-lwgnt,Uid:f799d7eb-bd88-46d2-8048-7018fcb4b99c,Namespace:calico-system,Attempt:0,}" Jul 15 11:20:03.355985 env[1219]: time="2025-07-15T11:20:03.355910668Z" level=error msg="Failed to destroy network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.356342 env[1219]: time="2025-07-15T11:20:03.356275221Z" level=error msg="encountered an error cleaning up failed sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.356770 env[1219]: time="2025-07-15T11:20:03.356730413Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cpqd8,Uid:10b9f436-677d-447b-8404-d1b1a0388753,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.357017 kubelet[1951]: E0715 11:20:03.356980 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.357109 kubelet[1951]: E0715 11:20:03.357046 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-cpqd8" Jul 15 11:20:03.357109 kubelet[1951]: E0715 11:20:03.357066 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-cpqd8" Jul 15 11:20:03.357163 kubelet[1951]: E0715 11:20:03.357108 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-cpqd8_kube-system(10b9f436-677d-447b-8404-d1b1a0388753)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-cpqd8_kube-system(10b9f436-677d-447b-8404-d1b1a0388753)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-cpqd8" podUID="10b9f436-677d-447b-8404-d1b1a0388753" Jul 15 11:20:03.361665 env[1219]: time="2025-07-15T11:20:03.361604085Z" level=error msg="Failed to destroy network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.363639 env[1219]: time="2025-07-15T11:20:03.363583570Z" level=error msg="Failed to destroy network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.366264 env[1219]: time="2025-07-15T11:20:03.366220122Z" level=error msg="encountered an error cleaning up failed sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.366346 env[1219]: time="2025-07-15T11:20:03.366287681Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-75csc,Uid:e99c048a-b44e-4e49-b8a2-60d71754b9a4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.366736 kubelet[1951]: E0715 11:20:03.366554 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.366736 kubelet[1951]: E0715 11:20:03.366605 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" Jul 15 11:20:03.366736 kubelet[1951]: E0715 11:20:03.366630 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" Jul 15 11:20:03.368503 env[1219]: time="2025-07-15T11:20:03.368180367Z" level=error msg="encountered an error cleaning up failed sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.368503 env[1219]: time="2025-07-15T11:20:03.368238886Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-678dcc9b89-w9brg,Uid:0bbb05f0-6922-4873-997d-efb6a051decc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.368638 kubelet[1951]: E0715 11:20:03.366672 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-65795b46b6-75csc_calico-apiserver(e99c048a-b44e-4e49-b8a2-60d71754b9a4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-65795b46b6-75csc_calico-apiserver(e99c048a-b44e-4e49-b8a2-60d71754b9a4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" podUID="e99c048a-b44e-4e49-b8a2-60d71754b9a4" Jul 15 11:20:03.368638 kubelet[1951]: E0715 11:20:03.368507 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.368638 kubelet[1951]: E0715 11:20:03.368563 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" Jul 15 11:20:03.368738 kubelet[1951]: E0715 11:20:03.368580 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" Jul 15 11:20:03.368738 kubelet[1951]: E0715 11:20:03.368622 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-678dcc9b89-w9brg_calico-system(0bbb05f0-6922-4873-997d-efb6a051decc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-678dcc9b89-w9brg_calico-system(0bbb05f0-6922-4873-997d-efb6a051decc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" podUID="0bbb05f0-6922-4873-997d-efb6a051decc" Jul 15 11:20:03.384323 env[1219]: time="2025-07-15T11:20:03.384257438Z" level=error msg="Failed to destroy network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.384717 env[1219]: time="2025-07-15T11:20:03.384681390Z" level=error msg="encountered an error cleaning up failed sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.384774 env[1219]: time="2025-07-15T11:20:03.384743349Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-7xgn9,Uid:0aa73792-5e92-42aa-b561-b947928db919,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.385008 kubelet[1951]: E0715 11:20:03.384964 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.385082 kubelet[1951]: E0715 11:20:03.385014 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" Jul 15 11:20:03.385082 kubelet[1951]: E0715 11:20:03.385034 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" Jul 15 11:20:03.385082 kubelet[1951]: E0715 11:20:03.385067 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-65795b46b6-7xgn9_calico-apiserver(0aa73792-5e92-42aa-b561-b947928db919)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-65795b46b6-7xgn9_calico-apiserver(0aa73792-5e92-42aa-b561-b947928db919)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" podUID="0aa73792-5e92-42aa-b561-b947928db919" Jul 15 11:20:03.391805 env[1219]: time="2025-07-15T11:20:03.391463428Z" level=error msg="Failed to destroy network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.391914 env[1219]: time="2025-07-15T11:20:03.391880461Z" level=error msg="encountered an error cleaning up failed sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.392198 env[1219]: time="2025-07-15T11:20:03.391927580Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mn59l,Uid:3406aa9f-b094-4101-a7eb-585fe64d1723,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.392401 kubelet[1951]: E0715 11:20:03.392138 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.392401 kubelet[1951]: E0715 11:20:03.392183 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-mn59l" Jul 15 11:20:03.392401 kubelet[1951]: E0715 11:20:03.392200 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-mn59l" Jul 15 11:20:03.392685 kubelet[1951]: E0715 11:20:03.392235 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-mn59l_kube-system(3406aa9f-b094-4101-a7eb-585fe64d1723)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-mn59l_kube-system(3406aa9f-b094-4101-a7eb-585fe64d1723)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-mn59l" podUID="3406aa9f-b094-4101-a7eb-585fe64d1723" Jul 15 11:20:03.393751 env[1219]: time="2025-07-15T11:20:03.393713148Z" level=error msg="Failed to destroy network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.394067 env[1219]: time="2025-07-15T11:20:03.394024902Z" level=error msg="encountered an error cleaning up failed sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.394119 env[1219]: time="2025-07-15T11:20:03.394075541Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-864b5bb44f-lwgnt,Uid:f799d7eb-bd88-46d2-8048-7018fcb4b99c,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.394247 kubelet[1951]: E0715 11:20:03.394221 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.394344 kubelet[1951]: E0715 11:20:03.394258 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-864b5bb44f-lwgnt" Jul 15 11:20:03.394344 kubelet[1951]: E0715 11:20:03.394276 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-864b5bb44f-lwgnt" Jul 15 11:20:03.394344 kubelet[1951]: E0715 11:20:03.394306 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-864b5bb44f-lwgnt_calico-system(f799d7eb-bd88-46d2-8048-7018fcb4b99c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-864b5bb44f-lwgnt_calico-system(f799d7eb-bd88-46d2-8048-7018fcb4b99c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-864b5bb44f-lwgnt" podUID="f799d7eb-bd88-46d2-8048-7018fcb4b99c" Jul 15 11:20:03.396226 env[1219]: time="2025-07-15T11:20:03.395042404Z" level=error msg="Failed to destroy network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.396226 env[1219]: time="2025-07-15T11:20:03.396118665Z" level=error msg="encountered an error cleaning up failed sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.396226 env[1219]: time="2025-07-15T11:20:03.396163944Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wdnmw,Uid:21108302-e040-4ff9-9142-3ed8f4d8bfc8,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.396441 kubelet[1951]: E0715 11:20:03.396293 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.396441 kubelet[1951]: E0715 11:20:03.396322 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-wdnmw" Jul 15 11:20:03.396441 kubelet[1951]: E0715 11:20:03.396334 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-wdnmw" Jul 15 11:20:03.396639 kubelet[1951]: E0715 11:20:03.396358 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-wdnmw_calico-system(21108302-e040-4ff9-9142-3ed8f4d8bfc8)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-wdnmw_calico-system(21108302-e040-4ff9-9142-3ed8f4d8bfc8)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-wdnmw" podUID="21108302-e040-4ff9-9142-3ed8f4d8bfc8" Jul 15 11:20:03.840755 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81-shm.mount: Deactivated successfully. Jul 15 11:20:03.840852 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63-shm.mount: Deactivated successfully. Jul 15 11:20:03.886436 systemd[1]: Created slice kubepods-besteffort-pod96ed7aff_ca57_4e30_a201_f756b40d3f77.slice. Jul 15 11:20:03.888369 env[1219]: time="2025-07-15T11:20:03.888325053Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-456pj,Uid:96ed7aff-ca57-4e30-a201-f756b40d3f77,Namespace:calico-system,Attempt:0,}" Jul 15 11:20:03.942304 env[1219]: time="2025-07-15T11:20:03.942238964Z" level=error msg="Failed to destroy network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.942802 env[1219]: time="2025-07-15T11:20:03.942767794Z" level=error msg="encountered an error cleaning up failed sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.942965 env[1219]: time="2025-07-15T11:20:03.942936671Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-456pj,Uid:96ed7aff-ca57-4e30-a201-f756b40d3f77,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.943461 kubelet[1951]: E0715 11:20:03.943310 1951 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:03.943461 kubelet[1951]: E0715 11:20:03.943388 1951 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-456pj" Jul 15 11:20:03.944264 kubelet[1951]: E0715 11:20:03.943426 1951 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-456pj" Jul 15 11:20:03.944264 kubelet[1951]: E0715 11:20:03.944230 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-456pj_calico-system(96ed7aff-ca57-4e30-a201-f756b40d3f77)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-456pj_calico-system(96ed7aff-ca57-4e30-a201-f756b40d3f77)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-456pj" podUID="96ed7aff-ca57-4e30-a201-f756b40d3f77" Jul 15 11:20:03.944408 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f-shm.mount: Deactivated successfully. Jul 15 11:20:03.951251 kubelet[1951]: I0715 11:20:03.951222 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:03.953793 env[1219]: time="2025-07-15T11:20:03.953756597Z" level=info msg="StopPodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\"" Jul 15 11:20:03.954435 kubelet[1951]: I0715 11:20:03.953839 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:03.955788 env[1219]: time="2025-07-15T11:20:03.955760361Z" level=info msg="StopPodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\"" Jul 15 11:20:03.956327 kubelet[1951]: I0715 11:20:03.956087 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:03.957413 env[1219]: time="2025-07-15T11:20:03.957207495Z" level=info msg="StopPodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\"" Jul 15 11:20:03.958331 kubelet[1951]: I0715 11:20:03.958012 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:03.959192 env[1219]: time="2025-07-15T11:20:03.959107660Z" level=info msg="StopPodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\"" Jul 15 11:20:03.959596 kubelet[1951]: I0715 11:20:03.959579 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:03.961329 env[1219]: time="2025-07-15T11:20:03.960689872Z" level=info msg="StopPodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\"" Jul 15 11:20:03.964652 kubelet[1951]: I0715 11:20:03.963842 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:03.966202 env[1219]: time="2025-07-15T11:20:03.965228030Z" level=info msg="StopPodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\"" Jul 15 11:20:03.967597 kubelet[1951]: I0715 11:20:03.967087 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:03.968069 env[1219]: time="2025-07-15T11:20:03.968029020Z" level=info msg="StopPodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\"" Jul 15 11:20:03.969132 kubelet[1951]: I0715 11:20:03.968996 1951 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:03.969988 env[1219]: time="2025-07-15T11:20:03.969937946Z" level=info msg="StopPodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\"" Jul 15 11:20:04.002565 env[1219]: time="2025-07-15T11:20:04.002497721Z" level=error msg="StopPodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" failed" error="failed to destroy network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.002783 kubelet[1951]: E0715 11:20:04.002745 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:04.002925 kubelet[1951]: E0715 11:20:04.002805 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d"} Jul 15 11:20:04.002925 kubelet[1951]: E0715 11:20:04.002877 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e99c048a-b44e-4e49-b8a2-60d71754b9a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.002925 kubelet[1951]: E0715 11:20:04.002898 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e99c048a-b44e-4e49-b8a2-60d71754b9a4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" podUID="e99c048a-b44e-4e49-b8a2-60d71754b9a4" Jul 15 11:20:04.008731 env[1219]: time="2025-07-15T11:20:04.008677375Z" level=error msg="StopPodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" failed" error="failed to destroy network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.009286 kubelet[1951]: E0715 11:20:04.008977 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:04.009286 kubelet[1951]: E0715 11:20:04.009026 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc"} Jul 15 11:20:04.009286 kubelet[1951]: E0715 11:20:04.009061 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.009286 kubelet[1951]: E0715 11:20:04.009082 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-864b5bb44f-lwgnt" podUID="f799d7eb-bd88-46d2-8048-7018fcb4b99c" Jul 15 11:20:04.027478 env[1219]: time="2025-07-15T11:20:04.027410532Z" level=error msg="StopPodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" failed" error="failed to destroy network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.027718 kubelet[1951]: E0715 11:20:04.027659 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:04.027775 kubelet[1951]: E0715 11:20:04.027712 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81"} Jul 15 11:20:04.027775 kubelet[1951]: E0715 11:20:04.027750 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3406aa9f-b094-4101-a7eb-585fe64d1723\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.027887 kubelet[1951]: E0715 11:20:04.027772 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3406aa9f-b094-4101-a7eb-585fe64d1723\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-mn59l" podUID="3406aa9f-b094-4101-a7eb-585fe64d1723" Jul 15 11:20:04.033016 env[1219]: time="2025-07-15T11:20:04.032954917Z" level=error msg="StopPodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" failed" error="failed to destroy network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.033349 kubelet[1951]: E0715 11:20:04.033305 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:04.033442 kubelet[1951]: E0715 11:20:04.033366 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846"} Jul 15 11:20:04.033442 kubelet[1951]: E0715 11:20:04.033399 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0bbb05f0-6922-4873-997d-efb6a051decc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.033442 kubelet[1951]: E0715 11:20:04.033421 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0bbb05f0-6922-4873-997d-efb6a051decc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" podUID="0bbb05f0-6922-4873-997d-efb6a051decc" Jul 15 11:20:04.034507 env[1219]: time="2025-07-15T11:20:04.034464891Z" level=error msg="StopPodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" failed" error="failed to destroy network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.034826 kubelet[1951]: E0715 11:20:04.034788 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:04.034913 kubelet[1951]: E0715 11:20:04.034827 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82"} Jul 15 11:20:04.034913 kubelet[1951]: E0715 11:20:04.034852 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"0aa73792-5e92-42aa-b561-b947928db919\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.034913 kubelet[1951]: E0715 11:20:04.034875 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"0aa73792-5e92-42aa-b561-b947928db919\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" podUID="0aa73792-5e92-42aa-b561-b947928db919" Jul 15 11:20:04.051652 env[1219]: time="2025-07-15T11:20:04.051582436Z" level=error msg="StopPodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" failed" error="failed to destroy network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.052089 kubelet[1951]: E0715 11:20:04.051932 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:04.052089 kubelet[1951]: E0715 11:20:04.051987 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5"} Jul 15 11:20:04.052089 kubelet[1951]: E0715 11:20:04.052024 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"21108302-e040-4ff9-9142-3ed8f4d8bfc8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.052089 kubelet[1951]: E0715 11:20:04.052050 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"21108302-e040-4ff9-9142-3ed8f4d8bfc8\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-wdnmw" podUID="21108302-e040-4ff9-9142-3ed8f4d8bfc8" Jul 15 11:20:04.053651 env[1219]: time="2025-07-15T11:20:04.053606281Z" level=error msg="StopPodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" failed" error="failed to destroy network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.053836 kubelet[1951]: E0715 11:20:04.053796 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:04.053905 kubelet[1951]: E0715 11:20:04.053847 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63"} Jul 15 11:20:04.053905 kubelet[1951]: E0715 11:20:04.053876 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"10b9f436-677d-447b-8404-d1b1a0388753\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.053977 kubelet[1951]: E0715 11:20:04.053900 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"10b9f436-677d-447b-8404-d1b1a0388753\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-cpqd8" podUID="10b9f436-677d-447b-8404-d1b1a0388753" Jul 15 11:20:04.056167 env[1219]: time="2025-07-15T11:20:04.056108118Z" level=error msg="StopPodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" failed" error="failed to destroy network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:20:04.056496 kubelet[1951]: E0715 11:20:04.056373 1951 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:04.056496 kubelet[1951]: E0715 11:20:04.056416 1951 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f"} Jul 15 11:20:04.056496 kubelet[1951]: E0715 11:20:04.056442 1951 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"96ed7aff-ca57-4e30-a201-f756b40d3f77\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:20:04.056496 kubelet[1951]: E0715 11:20:04.056464 1951 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"96ed7aff-ca57-4e30-a201-f756b40d3f77\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-456pj" podUID="96ed7aff-ca57-4e30-a201-f756b40d3f77" Jul 15 11:20:09.058313 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount934916161.mount: Deactivated successfully. Jul 15 11:20:09.475283 env[1219]: time="2025-07-15T11:20:09.475162922Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:09.477844 env[1219]: time="2025-07-15T11:20:09.477793805Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:09.479444 env[1219]: time="2025-07-15T11:20:09.479419942Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:09.480471 env[1219]: time="2025-07-15T11:20:09.480442167Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:09.481125 env[1219]: time="2025-07-15T11:20:09.481099038Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 15 11:20:09.495124 env[1219]: time="2025-07-15T11:20:09.495085921Z" level=info msg="CreateContainer within sandbox \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:20:09.510201 env[1219]: time="2025-07-15T11:20:09.510145509Z" level=info msg="CreateContainer within sandbox \"6758ff0a54d0286e82d4865099d8623c8f10572c654f7c0415cf58931b7dd25b\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"b1b3e2246529ea3a25e38953aca45caca68a8405a5047f50b6792dfda911af57\"" Jul 15 11:20:09.510843 env[1219]: time="2025-07-15T11:20:09.510790979Z" level=info msg="StartContainer for \"b1b3e2246529ea3a25e38953aca45caca68a8405a5047f50b6792dfda911af57\"" Jul 15 11:20:09.534621 systemd[1]: Started cri-containerd-b1b3e2246529ea3a25e38953aca45caca68a8405a5047f50b6792dfda911af57.scope. Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609866 kernel: kauditd_printk_skb: 141 callbacks suppressed Jul 15 11:20:09.609973 kernel: audit: type=1400 audit(1752578409.607:1005): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2438 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:09.615757 kernel: audit: type=1300 audit(1752578409.607:1005): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2438 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:09.615853 kernel: audit: type=1327 audit(1752578409.607:1005): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623365323234363532396561336132356533383935336163613435 Jul 15 11:20:09.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623365323234363532396561336132356533383935336163613435 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.621295 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.623914 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.626340 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.626423 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.631130 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.633737 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.634898 kernel: audit: type=1400 audit(1752578409.607:1006): avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.607000 audit: BPF prog-id=133 op=LOAD Jul 15 11:20:09.607000 audit[3172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2438 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:09.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623365323234363532396561336132356533383935336163613435 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.608000 audit: BPF prog-id=134 op=LOAD Jul 15 11:20:09.608000 audit[3172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2438 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:09.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623365323234363532396561336132356533383935336163613435 Jul 15 11:20:09.609000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:20:09.609000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { perfmon } for pid=3172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit[3172]: AVC avc: denied { bpf } for pid=3172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:09.609000 audit: BPF prog-id=135 op=LOAD Jul 15 11:20:09.609000 audit[3172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2438 pid=3172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:09.609000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231623365323234363532396561336132356533383935336163613435 Jul 15 11:20:09.646349 env[1219]: time="2025-07-15T11:20:09.646301630Z" level=info msg="StartContainer for \"b1b3e2246529ea3a25e38953aca45caca68a8405a5047f50b6792dfda911af57\" returns successfully" Jul 15 11:20:09.818650 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:20:09.818854 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:20:09.954533 env[1219]: time="2025-07-15T11:20:09.954493766Z" level=info msg="StopPodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\"" Jul 15 11:20:10.012957 kubelet[1951]: I0715 11:20:10.012336 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-2f8ss" podStartSLOduration=1.6485519499999999 podStartE2EDuration="15.012308717s" podCreationTimestamp="2025-07-15 11:19:55 +0000 UTC" firstStartedPulling="2025-07-15 11:19:56.118401096 +0000 UTC m=+17.327410072" lastFinishedPulling="2025-07-15 11:20:09.482157863 +0000 UTC m=+30.691166839" observedRunningTime="2025-07-15 11:20:10.00912952 +0000 UTC m=+31.218138456" watchObservedRunningTime="2025-07-15 11:20:10.012308717 +0000 UTC m=+31.221317693" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.070 [INFO][3229] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.071 [INFO][3229] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" iface="eth0" netns="/var/run/netns/cni-03c0b64c-cbf8-8531-f687-b45a75b141b9" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.071 [INFO][3229] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" iface="eth0" netns="/var/run/netns/cni-03c0b64c-cbf8-8531-f687-b45a75b141b9" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.074 [INFO][3229] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" iface="eth0" netns="/var/run/netns/cni-03c0b64c-cbf8-8531-f687-b45a75b141b9" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.074 [INFO][3229] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.074 [INFO][3229] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.158 [INFO][3238] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.158 [INFO][3238] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.158 [INFO][3238] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.168 [WARNING][3238] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.168 [INFO][3238] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.169 [INFO][3238] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:10.173328 env[1219]: 2025-07-15 11:20:10.171 [INFO][3229] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:10.174026 env[1219]: time="2025-07-15T11:20:10.173586567Z" level=info msg="TearDown network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" successfully" Jul 15 11:20:10.174026 env[1219]: time="2025-07-15T11:20:10.173621846Z" level=info msg="StopPodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" returns successfully" Jul 15 11:20:10.175482 systemd[1]: run-netns-cni\x2d03c0b64c\x2dcbf8\x2d8531\x2df687\x2db45a75b141b9.mount: Deactivated successfully. Jul 15 11:20:10.311496 kubelet[1951]: I0715 11:20:10.311446 1951 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-vwtrl\" (UniqueName: \"kubernetes.io/projected/f799d7eb-bd88-46d2-8048-7018fcb4b99c-kube-api-access-vwtrl\") pod \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\" (UID: \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\") " Jul 15 11:20:10.311496 kubelet[1951]: I0715 11:20:10.311499 1951 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-backend-key-pair\") pod \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\" (UID: \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\") " Jul 15 11:20:10.311711 kubelet[1951]: I0715 11:20:10.311523 1951 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-ca-bundle\") pod \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\" (UID: \"f799d7eb-bd88-46d2-8048-7018fcb4b99c\") " Jul 15 11:20:10.316221 kubelet[1951]: I0715 11:20:10.316177 1951 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "f799d7eb-bd88-46d2-8048-7018fcb4b99c" (UID: "f799d7eb-bd88-46d2-8048-7018fcb4b99c"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 15 11:20:10.316851 kubelet[1951]: I0715 11:20:10.316801 1951 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "f799d7eb-bd88-46d2-8048-7018fcb4b99c" (UID: "f799d7eb-bd88-46d2-8048-7018fcb4b99c"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 15 11:20:10.318533 systemd[1]: var-lib-kubelet-pods-f799d7eb\x2dbd88\x2d46d2\x2d8048\x2d7018fcb4b99c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dvwtrl.mount: Deactivated successfully. Jul 15 11:20:10.318626 systemd[1]: var-lib-kubelet-pods-f799d7eb\x2dbd88\x2d46d2\x2d8048\x2d7018fcb4b99c-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:20:10.319687 kubelet[1951]: I0715 11:20:10.319655 1951 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/f799d7eb-bd88-46d2-8048-7018fcb4b99c-kube-api-access-vwtrl" (OuterVolumeSpecName: "kube-api-access-vwtrl") pod "f799d7eb-bd88-46d2-8048-7018fcb4b99c" (UID: "f799d7eb-bd88-46d2-8048-7018fcb4b99c"). InnerVolumeSpecName "kube-api-access-vwtrl". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 15 11:20:10.412458 kubelet[1951]: I0715 11:20:10.412419 1951 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:20:10.412641 kubelet[1951]: I0715 11:20:10.412627 1951 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-vwtrl\" (UniqueName: \"kubernetes.io/projected/f799d7eb-bd88-46d2-8048-7018fcb4b99c-kube-api-access-vwtrl\") on node \"localhost\" DevicePath \"\"" Jul 15 11:20:10.412709 kubelet[1951]: I0715 11:20:10.412697 1951 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f799d7eb-bd88-46d2-8048-7018fcb4b99c-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:20:10.890442 systemd[1]: Removed slice kubepods-besteffort-podf799d7eb_bd88_46d2_8048_7018fcb4b99c.slice. Jul 15 11:20:10.994851 kubelet[1951]: I0715 11:20:10.994802 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:20:11.052912 systemd[1]: Created slice kubepods-besteffort-podfe18045e_080a_4c7c_bc3d_fa568b8ff252.slice. Jul 15 11:20:11.156000 audit[3320]: AVC avc: denied { write } for pid=3320 comm="tee" name="fd" dev="proc" ino=17820 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.156000 audit[3320]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc19af7d5 a2=241 a3=1b6 items=1 ppid=3269 pid=3320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.156000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:20:11.156000 audit: PATH item=0 name="/dev/fd/63" inode=19113 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.156000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.178000 audit[3331]: AVC avc: denied { write } for pid=3331 comm="tee" name="fd" dev="proc" ino=19864 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.178000 audit[3331]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffcef557e5 a2=241 a3=1b6 items=1 ppid=3273 pid=3331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.178000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:20:11.178000 audit: PATH item=0 name="/dev/fd/63" inode=19115 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.178000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.179000 audit[3326]: AVC avc: denied { write } for pid=3326 comm="tee" name="fd" dev="proc" ino=19123 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.179000 audit[3326]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe21227e6 a2=241 a3=1b6 items=1 ppid=3279 pid=3326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.179000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:20:11.179000 audit: PATH item=0 name="/dev/fd/63" inode=19114 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.179000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.182000 audit[3338]: AVC avc: denied { write } for pid=3338 comm="tee" name="fd" dev="proc" ino=19868 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.182000 audit[3338]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffee0a7e5 a2=241 a3=1b6 items=1 ppid=3267 pid=3338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.182000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:20:11.182000 audit: PATH item=0 name="/dev/fd/63" inode=19120 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.182000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.193000 audit[3344]: AVC avc: denied { write } for pid=3344 comm="tee" name="fd" dev="proc" ino=19130 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.193000 audit[3344]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffc7dd27e7 a2=241 a3=1b6 items=1 ppid=3275 pid=3344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.193000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:20:11.193000 audit: PATH item=0 name="/dev/fd/63" inode=19125 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.193000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.204000 audit[3334]: AVC avc: denied { write } for pid=3334 comm="tee" name="fd" dev="proc" ino=19873 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.204000 audit[3334]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffd5a807d6 a2=241 a3=1b6 items=1 ppid=3278 pid=3334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.204000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:20:11.204000 audit: PATH item=0 name="/dev/fd/63" inode=19861 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.204000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.210000 audit[3349]: AVC avc: denied { write } for pid=3349 comm="tee" name="fd" dev="proc" ino=17828 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:20:11.210000 audit[3349]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffc8997e5 a2=241 a3=1b6 items=1 ppid=3268 pid=3349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.210000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:20:11.210000 audit: PATH item=0 name="/dev/fd/63" inode=19870 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:20:11.210000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:20:11.217062 kubelet[1951]: I0715 11:20:11.216916 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fe18045e-080a-4c7c-bc3d-fa568b8ff252-whisker-ca-bundle\") pod \"whisker-7cffccdcc9-tqmv2\" (UID: \"fe18045e-080a-4c7c-bc3d-fa568b8ff252\") " pod="calico-system/whisker-7cffccdcc9-tqmv2" Jul 15 11:20:11.217062 kubelet[1951]: I0715 11:20:11.216962 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/fe18045e-080a-4c7c-bc3d-fa568b8ff252-whisker-backend-key-pair\") pod \"whisker-7cffccdcc9-tqmv2\" (UID: \"fe18045e-080a-4c7c-bc3d-fa568b8ff252\") " pod="calico-system/whisker-7cffccdcc9-tqmv2" Jul 15 11:20:11.217062 kubelet[1951]: I0715 11:20:11.216986 1951 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jnzjf\" (UniqueName: \"kubernetes.io/projected/fe18045e-080a-4c7c-bc3d-fa568b8ff252-kube-api-access-jnzjf\") pod \"whisker-7cffccdcc9-tqmv2\" (UID: \"fe18045e-080a-4c7c-bc3d-fa568b8ff252\") " pod="calico-system/whisker-7cffccdcc9-tqmv2" Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.335000 audit: BPF prog-id=136 op=LOAD Jul 15 11:20:11.335000 audit[3390]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc98f00e8 a2=98 a3=ffffc98f00d8 items=0 ppid=3270 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.335000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:20:11.336000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit: BPF prog-id=137 op=LOAD Jul 15 11:20:11.336000 audit[3390]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc98eff98 a2=74 a3=95 items=0 ppid=3270 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.336000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:20:11.336000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { bpf } for pid=3390 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit: BPF prog-id=138 op=LOAD Jul 15 11:20:11.336000 audit[3390]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc98effc8 a2=40 a3=ffffc98efff8 items=0 ppid=3270 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.336000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:20:11.336000 audit: BPF prog-id=138 op=UNLOAD Jul 15 11:20:11.336000 audit[3390]: AVC avc: denied { perfmon } for pid=3390 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.336000 audit[3390]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=ffffc98f00e0 a2=50 a3=0 items=0 ppid=3270 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.336000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit: BPF prog-id=139 op=LOAD Jul 15 11:20:11.337000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffd3ce4658 a2=98 a3=ffffd3ce4648 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.337000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.337000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit: BPF prog-id=140 op=LOAD Jul 15 11:20:11.337000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd3ce42e8 a2=74 a3=95 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.337000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.337000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.337000 audit: BPF prog-id=141 op=LOAD Jul 15 11:20:11.337000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd3ce4348 a2=94 a3=2 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.337000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.337000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:20:11.355965 env[1219]: time="2025-07-15T11:20:11.355910121Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7cffccdcc9-tqmv2,Uid:fe18045e-080a-4c7c-bc3d-fa568b8ff252,Namespace:calico-system,Attempt:0,}" Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit: BPF prog-id=142 op=LOAD Jul 15 11:20:11.427000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffd3ce4308 a2=40 a3=ffffd3ce4338 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.427000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.427000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:20:11.427000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.427000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffd3ce4420 a2=50 a3=0 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.427000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ce4378 a2=28 a3=ffffd3ce44a8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ce43a8 a2=28 a3=ffffd3ce44d8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ce4258 a2=28 a3=ffffd3ce4388 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ce43c8 a2=28 a3=ffffd3ce44f8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ce43a8 a2=28 a3=ffffd3ce44d8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ce4398 a2=28 a3=ffffd3ce44c8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ce43c8 a2=28 a3=ffffd3ce44f8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ce43a8 a2=28 a3=ffffd3ce44d8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ce43c8 a2=28 a3=ffffd3ce44f8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffd3ce4398 a2=28 a3=ffffd3ce44c8 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffd3ce4418 a2=28 a3=ffffd3ce4558 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd3ce4150 a2=50 a3=0 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit: BPF prog-id=143 op=LOAD Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffd3ce4158 a2=94 a3=5 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffd3ce4260 a2=50 a3=0 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffd3ce43a8 a2=4 a3=3 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.437000 audit[3391]: AVC avc: denied { confidentiality } for pid=3391 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:20:11.437000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd3ce4388 a2=94 a3=6 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.437000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { confidentiality } for pid=3391 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:20:11.438000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd3ce3b58 a2=94 a3=83 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.438000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { perfmon } for pid=3391 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { bpf } for pid=3391 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.438000 audit[3391]: AVC avc: denied { confidentiality } for pid=3391 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:20:11.438000 audit[3391]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffd3ce3b58 a2=94 a3=83 items=0 ppid=3270 pid=3391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.438000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit: BPF prog-id=144 op=LOAD Jul 15 11:20:11.454000 audit[3419]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdd3546a8 a2=98 a3=ffffdd354698 items=0 ppid=3270 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.454000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:20:11.454000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit: BPF prog-id=145 op=LOAD Jul 15 11:20:11.454000 audit[3419]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdd354558 a2=74 a3=95 items=0 ppid=3270 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.454000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:20:11.454000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { perfmon } for pid=3419 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit[3419]: AVC avc: denied { bpf } for pid=3419 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.454000 audit: BPF prog-id=146 op=LOAD Jul 15 11:20:11.454000 audit[3419]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdd354588 a2=40 a3=ffffdd3545b8 items=0 ppid=3270 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.454000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:20:11.454000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:20:11.507755 systemd-networkd[1044]: cali3deb971fa48: Link UP Jul 15 11:20:11.510014 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:20:11.510128 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali3deb971fa48: link becomes ready Jul 15 11:20:11.510356 systemd-networkd[1044]: cali3deb971fa48: Gained carrier Jul 15 11:20:11.524772 systemd-networkd[1044]: vxlan.calico: Link UP Jul 15 11:20:11.524778 systemd-networkd[1044]: vxlan.calico: Gained carrier Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.409 [INFO][3393] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0 whisker-7cffccdcc9- calico-system fe18045e-080a-4c7c-bc3d-fa568b8ff252 894 0 2025-07-15 11:20:11 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7cffccdcc9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7cffccdcc9-tqmv2 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali3deb971fa48 [] [] }} ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.409 [INFO][3393] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.439 [INFO][3409] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" HandleID="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Workload="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.440 [INFO][3409] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" HandleID="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Workload="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a1750), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7cffccdcc9-tqmv2", "timestamp":"2025-07-15 11:20:11.439613865 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.440 [INFO][3409] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.440 [INFO][3409] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.440 [INFO][3409] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.452 [INFO][3409] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.464 [INFO][3409] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.476 [INFO][3409] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.479 [INFO][3409] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.480 [INFO][3409] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.480 [INFO][3409] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.482 [INFO][3409] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.485 [INFO][3409] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.492 [INFO][3409] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.492 [INFO][3409] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" host="localhost" Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.492 [INFO][3409] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:11.532555 env[1219]: 2025-07-15 11:20:11.492 [INFO][3409] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" HandleID="k8s-pod-network.b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Workload="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.533318 env[1219]: 2025-07-15 11:20:11.494 [INFO][3393] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0", GenerateName:"whisker-7cffccdcc9-", Namespace:"calico-system", SelfLink:"", UID:"fe18045e-080a-4c7c-bc3d-fa568b8ff252", ResourceVersion:"894", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 20, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7cffccdcc9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7cffccdcc9-tqmv2", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3deb971fa48", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:11.533318 env[1219]: 2025-07-15 11:20:11.495 [INFO][3393] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.533318 env[1219]: 2025-07-15 11:20:11.495 [INFO][3393] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali3deb971fa48 ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.533318 env[1219]: 2025-07-15 11:20:11.512 [INFO][3393] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.533318 env[1219]: 2025-07-15 11:20:11.512 [INFO][3393] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0", GenerateName:"whisker-7cffccdcc9-", Namespace:"calico-system", SelfLink:"", UID:"fe18045e-080a-4c7c-bc3d-fa568b8ff252", ResourceVersion:"894", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 20, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7cffccdcc9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff", Pod:"whisker-7cffccdcc9-tqmv2", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali3deb971fa48", MAC:"f6:d7:13:7e:cb:b9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:11.533318 env[1219]: 2025-07-15 11:20:11.530 [INFO][3393] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff" Namespace="calico-system" Pod="whisker-7cffccdcc9-tqmv2" WorkloadEndpoint="localhost-k8s-whisker--7cffccdcc9--tqmv2-eth0" Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit: BPF prog-id=147 op=LOAD Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffc465f68 a2=98 a3=fffffc465f58 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit: BPF prog-id=148 op=LOAD Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffc465c48 a2=74 a3=95 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit: BPF prog-id=149 op=LOAD Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffc465ca8 a2=94 a3=2 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffc465cd8 a2=28 a3=fffffc465e08 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffc465d08 a2=28 a3=fffffc465e38 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffc465bb8 a2=28 a3=fffffc465ce8 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffc465d28 a2=28 a3=fffffc465e58 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffc465d08 a2=28 a3=fffffc465e38 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffc465cf8 a2=28 a3=fffffc465e28 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffc465d28 a2=28 a3=fffffc465e58 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffc465d08 a2=28 a3=fffffc465e38 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffc465d28 a2=28 a3=fffffc465e58 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffffc465cf8 a2=28 a3=fffffc465e28 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=fffffc465d78 a2=28 a3=fffffc465eb8 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.547000 audit: BPF prog-id=150 op=LOAD Jul 15 11:20:11.547000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffc465b98 a2=40 a3=fffffc465bc8 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.547000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.547000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=fffffc465bc0 a2=50 a3=0 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.548000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=fffffc465bc0 a2=50 a3=0 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.548000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit: BPF prog-id=151 op=LOAD Jul 15 11:20:11.548000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffc465328 a2=94 a3=2 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.548000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.548000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.548000 audit: BPF prog-id=152 op=LOAD Jul 15 11:20:11.548000 audit[3455]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffffc4654b8 a2=94 a3=30 items=0 ppid=3270 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.548000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:20:11.551433 env[1219]: time="2025-07-15T11:20:11.550134777Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:11.551433 env[1219]: time="2025-07-15T11:20:11.550178817Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:11.551433 env[1219]: time="2025-07-15T11:20:11.550194617Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:11.551433 env[1219]: time="2025-07-15T11:20:11.550361014Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff pid=3463 runtime=io.containerd.runc.v2 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.552000 audit: BPF prog-id=153 op=LOAD Jul 15 11:20:11.552000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffff11341b8 a2=98 a3=fffff11341a8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.552000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.552000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit: BPF prog-id=154 op=LOAD Jul 15 11:20:11.553000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff1133e48 a2=74 a3=95 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.553000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.553000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.553000 audit: BPF prog-id=155 op=LOAD Jul 15 11:20:11.553000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff1133ea8 a2=94 a3=2 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.553000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.553000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:20:11.569958 systemd[1]: Started cri-containerd-b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff.scope. Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit: BPF prog-id=156 op=LOAD Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=3463 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383733636530383833323935613862326132326635366233373466 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=3463 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383733636530383833323935613862326132326635366233373466 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit: BPF prog-id=157 op=LOAD Jul 15 11:20:11.614000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=3463 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383733636530383833323935613862326132326635366233373466 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit: BPF prog-id=158 op=LOAD Jul 15 11:20:11.614000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=3463 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383733636530383833323935613862326132326635366233373466 Jul 15 11:20:11.614000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:20:11.614000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { perfmon } for pid=3473 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit[3473]: AVC avc: denied { bpf } for pid=3473 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.614000 audit: BPF prog-id=159 op=LOAD Jul 15 11:20:11.614000 audit[3473]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=3463 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6238383733636530383833323935613862326132326635366233373466 Jul 15 11:20:11.617357 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:11.635477 env[1219]: time="2025-07-15T11:20:11.635430460Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7cffccdcc9-tqmv2,Uid:fe18045e-080a-4c7c-bc3d-fa568b8ff252,Namespace:calico-system,Attempt:0,} returns sandbox id \"b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff\"" Jul 15 11:20:11.637005 env[1219]: time="2025-07-15T11:20:11.636974720Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit: BPF prog-id=160 op=LOAD Jul 15 11:20:11.645000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=fffff1133e68 a2=40 a3=fffff1133e98 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.645000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.645000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:20:11.645000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.645000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=fffff1133f80 a2=50 a3=0 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.645000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1133ed8 a2=28 a3=fffff1134008 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1133f08 a2=28 a3=fffff1134038 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1133db8 a2=28 a3=fffff1133ee8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1133f28 a2=28 a3=fffff1134058 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1133f08 a2=28 a3=fffff1134038 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1133ef8 a2=28 a3=fffff1134028 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1133f28 a2=28 a3=fffff1134058 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1133f08 a2=28 a3=fffff1134038 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1133f28 a2=28 a3=fffff1134058 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=fffff1133ef8 a2=28 a3=fffff1134028 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.653000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.653000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=fffff1133f78 a2=28 a3=fffff11340b8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.653000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff1133cb0 a2=50 a3=0 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit: BPF prog-id=161 op=LOAD Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=fffff1133cb8 a2=94 a3=5 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit: BPF prog-id=161 op=UNLOAD Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=fffff1133dc0 a2=50 a3=0 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=fffff1133f08 a2=4 a3=3 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { confidentiality } for pid=3480 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff1133ee8 a2=94 a3=6 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { confidentiality } for pid=3480 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff11336b8 a2=94 a3=83 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { perfmon } for pid=3480 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.654000 audit[3480]: AVC avc: denied { confidentiality } for pid=3480 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:20:11.654000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=fffff11336b8 a2=94 a3=83 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.654000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.655000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.655000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff11350f8 a2=10 a3=fffff11351e8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.655000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.655000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff1134fb8 a2=10 a3=fffff11350a8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.655000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.655000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff1134f28 a2=10 a3=fffff11350a8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.655000 audit[3480]: AVC avc: denied { bpf } for pid=3480 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:11.655000 audit[3480]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=fffff1134f28 a2=10 a3=fffff11350a8 items=0 ppid=3270 pid=3480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.655000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:20:11.664000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:20:11.706000 audit[3525]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3525 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:11.706000 audit[3525]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffd9e39b90 a2=0 a3=ffffb8dc8fa8 items=0 ppid=3270 pid=3525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.706000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:11.717000 audit[3527]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3527 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:11.717000 audit[3527]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffcbe9bc50 a2=0 a3=ffff93f68fa8 items=0 ppid=3270 pid=3527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.717000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:11.719000 audit[3528]: NETFILTER_CFG table=raw:103 family=2 entries=21 op=nft_register_chain pid=3528 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:11.719000 audit[3528]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=fffff07fb180 a2=0 a3=ffffa43cdfa8 items=0 ppid=3270 pid=3528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.719000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:11.720000 audit[3526]: NETFILTER_CFG table=filter:104 family=2 entries=39 op=nft_register_chain pid=3526 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:11.720000 audit[3526]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=18968 a0=3 a1=fffff329c930 a2=0 a3=ffff8c9e6fa8 items=0 ppid=3270 pid=3526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.720000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:11.741000 audit[3536]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3536 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:11.741000 audit[3536]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=35860 a0=3 a1=ffffe262a1c0 a2=0 a3=ffffb616cfa8 items=0 ppid=3270 pid=3536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:11.741000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:12.630997 systemd-networkd[1044]: cali3deb971fa48: Gained IPv6LL Jul 15 11:20:12.883823 kubelet[1951]: I0715 11:20:12.883697 1951 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="f799d7eb-bd88-46d2-8048-7018fcb4b99c" path="/var/lib/kubelet/pods/f799d7eb-bd88-46d2-8048-7018fcb4b99c/volumes" Jul 15 11:20:12.926449 env[1219]: time="2025-07-15T11:20:12.926396769Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:12.927897 env[1219]: time="2025-07-15T11:20:12.927864830Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:12.929720 env[1219]: time="2025-07-15T11:20:12.929693687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:12.931089 env[1219]: time="2025-07-15T11:20:12.931060550Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:12.931602 env[1219]: time="2025-07-15T11:20:12.931574463Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 15 11:20:12.933875 env[1219]: time="2025-07-15T11:20:12.933798155Z" level=info msg="CreateContainer within sandbox \"b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:20:12.945228 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1882158475.mount: Deactivated successfully. Jul 15 11:20:12.946611 env[1219]: time="2025-07-15T11:20:12.946558274Z" level=info msg="CreateContainer within sandbox \"b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"d7aa4d9908f4989dfae04cf0d60e8edf8980abd7d27b3849736d7d8b519e8472\"" Jul 15 11:20:12.947444 env[1219]: time="2025-07-15T11:20:12.947412383Z" level=info msg="StartContainer for \"d7aa4d9908f4989dfae04cf0d60e8edf8980abd7d27b3849736d7d8b519e8472\"" Jul 15 11:20:12.970059 systemd[1]: Started cri-containerd-d7aa4d9908f4989dfae04cf0d60e8edf8980abd7d27b3849736d7d8b519e8472.scope. Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit: BPF prog-id=162 op=LOAD Jul 15 11:20:13.015000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[3552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3463 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:13.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616134643939303866343938396466616530346366306436306538 Jul 15 11:20:13.015000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.015000 audit[3552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3463 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:13.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616134643939303866343938396466616530346366306436306538 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit: BPF prog-id=163 op=LOAD Jul 15 11:20:13.016000 audit[3552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3463 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:13.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616134643939303866343938396466616530346366306436306538 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit: BPF prog-id=164 op=LOAD Jul 15 11:20:13.016000 audit[3552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3463 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:13.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616134643939303866343938396466616530346366306436306538 Jul 15 11:20:13.016000 audit: BPF prog-id=164 op=UNLOAD Jul 15 11:20:13.016000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { perfmon } for pid=3552 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit[3552]: AVC avc: denied { bpf } for pid=3552 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:13.016000 audit: BPF prog-id=165 op=LOAD Jul 15 11:20:13.016000 audit[3552]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3463 pid=3552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:13.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437616134643939303866343938396466616530346366306436306538 Jul 15 11:20:13.049371 env[1219]: time="2025-07-15T11:20:13.049292355Z" level=info msg="StartContainer for \"d7aa4d9908f4989dfae04cf0d60e8edf8980abd7d27b3849736d7d8b519e8472\" returns successfully" Jul 15 11:20:13.053159 env[1219]: time="2025-07-15T11:20:13.053129708Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:20:13.079000 audit[3563]: AVC avc: denied { search } for pid=3563 comm="nginx" name="crypto" dev="proc" ino=20832 scontext=system_u:system_r:svirt_lxc_net_t:s0:c739,c987 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:20:13.079000 audit[3563]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffff88bdc958 a2=0 a3=0 items=0 ppid=3463 pid=3563 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c739,c987 key=(null) Jul 15 11:20:13.079000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:20:13.270933 systemd-networkd[1044]: vxlan.calico: Gained IPv6LL Jul 15 11:20:13.323347 systemd[1]: run-containerd-runc-k8s.io-d7aa4d9908f4989dfae04cf0d60e8edf8980abd7d27b3849736d7d8b519e8472-runc.08QPzY.mount: Deactivated successfully. Jul 15 11:20:13.449920 kubelet[1951]: I0715 11:20:13.449868 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:20:14.501869 systemd[1]: Started sshd@7-10.0.0.109:22-10.0.0.1:60240.service. Jul 15 11:20:14.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.109:22-10.0.0.1:60240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:14.547000 audit[3633]: USER_ACCT pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.549409 sshd[3633]: Accepted publickey for core from 10.0.0.1 port 60240 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:14.550000 audit[3633]: CRED_ACQ pid=3633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.550000 audit[3633]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc22c1790 a2=3 a3=1 items=0 ppid=1 pid=3633 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:14.550000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:14.552941 sshd[3633]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:14.556434 systemd-logind[1207]: New session 8 of user core. Jul 15 11:20:14.557327 systemd[1]: Started session-8.scope. Jul 15 11:20:14.558000 audit[3633]: USER_START pid=3633 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.560000 audit[3635]: CRED_ACQ pid=3635 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.747706 sshd[3633]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:14.747000 audit[3633]: USER_END pid=3633 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.749858 kernel: kauditd_printk_skb: 718 callbacks suppressed Jul 15 11:20:14.749931 kernel: audit: type=1106 audit(1752578414.747:1164): pid=3633 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.753636 systemd[1]: sshd@7-10.0.0.109:22-10.0.0.1:60240.service: Deactivated successfully. Jul 15 11:20:14.754423 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:20:14.747000 audit[3633]: CRED_DISP pid=3633 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.755116 systemd-logind[1207]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:20:14.757716 kernel: audit: type=1104 audit(1752578414.747:1165): pid=3633 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:14.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.109:22-10.0.0.1:60240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:14.758348 systemd-logind[1207]: Removed session 8. Jul 15 11:20:14.760884 kernel: audit: type=1131 audit(1752578414.752:1166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.109:22-10.0.0.1:60240 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:14.783375 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount682559378.mount: Deactivated successfully. Jul 15 11:20:14.849662 env[1219]: time="2025-07-15T11:20:14.849605086Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:14.852094 env[1219]: time="2025-07-15T11:20:14.852065177Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:14.853839 env[1219]: time="2025-07-15T11:20:14.853576079Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:14.855753 env[1219]: time="2025-07-15T11:20:14.855716614Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:14.858664 env[1219]: time="2025-07-15T11:20:14.857312795Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 15 11:20:14.861786 env[1219]: time="2025-07-15T11:20:14.861745622Z" level=info msg="CreateContainer within sandbox \"b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:20:14.873038 env[1219]: time="2025-07-15T11:20:14.873001129Z" level=info msg="CreateContainer within sandbox \"b8873ce0883295a8b2a22f56b374fd7df2ea86764ea746c436893c5a8224fbff\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"042724aed3c75c687fc597f06a67d615f5d393df2cdff9247692dfcc428ace08\"" Jul 15 11:20:14.873559 env[1219]: time="2025-07-15T11:20:14.873532403Z" level=info msg="StartContainer for \"042724aed3c75c687fc597f06a67d615f5d393df2cdff9247692dfcc428ace08\"" Jul 15 11:20:14.884351 env[1219]: time="2025-07-15T11:20:14.883785202Z" level=info msg="StopPodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\"" Jul 15 11:20:14.897712 systemd[1]: Started cri-containerd-042724aed3c75c687fc597f06a67d615f5d393df2cdff9247692dfcc428ace08.scope. Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.926186 kernel: audit: type=1400 audit(1752578414.919:1167): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.926262 kernel: audit: type=1400 audit(1752578414.919:1168): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.926286 kernel: audit: type=1400 audit(1752578414.919:1169): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.930714 kernel: audit: type=1400 audit(1752578414.919:1170): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.930798 kernel: audit: type=1400 audit(1752578414.919:1171): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.936465 kernel: audit: type=1400 audit(1752578414.919:1172): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.936555 kernel: audit: type=1400 audit(1752578414.919:1173): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit: BPF prog-id=166 op=LOAD Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3463 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:14.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034323732346165643363373563363837666335393766303661363764 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3463 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:14.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034323732346165643363373563363837666335393766303661363764 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.919000 audit: BPF prog-id=167 op=LOAD Jul 15 11:20:14.919000 audit[3658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3463 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:14.919000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034323732346165643363373563363837666335393766303661363764 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.922000 audit: BPF prog-id=168 op=LOAD Jul 15 11:20:14.922000 audit[3658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3463 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:14.922000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034323732346165643363373563363837666335393766303661363764 Jul 15 11:20:14.924000 audit: BPF prog-id=168 op=UNLOAD Jul 15 11:20:14.924000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { perfmon } for pid=3658 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit[3658]: AVC avc: denied { bpf } for pid=3658 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:14.924000 audit: BPF prog-id=169 op=LOAD Jul 15 11:20:14.924000 audit[3658]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3463 pid=3658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:14.924000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034323732346165643363373563363837666335393766303661363764 Jul 15 11:20:14.970768 env[1219]: time="2025-07-15T11:20:14.970719694Z" level=info msg="StartContainer for \"042724aed3c75c687fc597f06a67d615f5d393df2cdff9247692dfcc428ace08\" returns successfully" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.963 [INFO][3688] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.963 [INFO][3688] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" iface="eth0" netns="/var/run/netns/cni-b9b67dfc-01cb-fbd3-b7a9-1ef6867b8dd7" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.963 [INFO][3688] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" iface="eth0" netns="/var/run/netns/cni-b9b67dfc-01cb-fbd3-b7a9-1ef6867b8dd7" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.963 [INFO][3688] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" iface="eth0" netns="/var/run/netns/cni-b9b67dfc-01cb-fbd3-b7a9-1ef6867b8dd7" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.963 [INFO][3688] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.964 [INFO][3688] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.995 [INFO][3706] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.995 [INFO][3706] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:14.995 [INFO][3706] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:15.004 [WARNING][3706] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:15.005 [INFO][3706] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:15.006 [INFO][3706] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:15.013784 env[1219]: 2025-07-15 11:20:15.008 [INFO][3688] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:15.015357 env[1219]: time="2025-07-15T11:20:15.015311051Z" level=info msg="TearDown network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" successfully" Jul 15 11:20:15.015418 env[1219]: time="2025-07-15T11:20:15.015354091Z" level=info msg="StopPodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" returns successfully" Jul 15 11:20:15.018065 env[1219]: time="2025-07-15T11:20:15.017927221Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-75csc,Uid:e99c048a-b44e-4e49-b8a2-60d71754b9a4,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:20:15.061000 audit[3732]: NETFILTER_CFG table=filter:106 family=2 entries=19 op=nft_register_rule pid=3732 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:15.061000 audit[3732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffee64f7b0 a2=0 a3=1 items=0 ppid=2062 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.061000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:15.067000 audit[3732]: NETFILTER_CFG table=nat:107 family=2 entries=21 op=nft_register_chain pid=3732 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:15.067000 audit[3732]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffee64f7b0 a2=0 a3=1 items=0 ppid=2062 pid=3732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.067000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:15.148738 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:20:15.148894 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid3e1099d7e9: link becomes ready Jul 15 11:20:15.146893 systemd-networkd[1044]: calid3e1099d7e9: Link UP Jul 15 11:20:15.148728 systemd-networkd[1044]: calid3e1099d7e9: Gained carrier Jul 15 11:20:15.159318 kubelet[1951]: I0715 11:20:15.158189 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7cffccdcc9-tqmv2" podStartSLOduration=0.935395449 podStartE2EDuration="4.158171615s" podCreationTimestamp="2025-07-15 11:20:11 +0000 UTC" firstStartedPulling="2025-07-15 11:20:11.636703443 +0000 UTC m=+32.845712419" lastFinishedPulling="2025-07-15 11:20:14.859479609 +0000 UTC m=+36.068488585" observedRunningTime="2025-07-15 11:20:15.036578848 +0000 UTC m=+36.245587824" watchObservedRunningTime="2025-07-15 11:20:15.158171615 +0000 UTC m=+36.367180591" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.080 [INFO][3715] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0 calico-apiserver-65795b46b6- calico-apiserver e99c048a-b44e-4e49-b8a2-60d71754b9a4 946 0 2025-07-15 11:19:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:65795b46b6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-65795b46b6-75csc eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid3e1099d7e9 [] [] }} ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.081 [INFO][3715] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.104 [INFO][3735] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" HandleID="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.104 [INFO][3735] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" HandleID="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000136530), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-65795b46b6-75csc", "timestamp":"2025-07-15 11:20:15.104662748 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.104 [INFO][3735] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.104 [INFO][3735] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.104 [INFO][3735] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.113 [INFO][3735] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.118 [INFO][3735] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.122 [INFO][3735] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.124 [INFO][3735] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.128 [INFO][3735] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.128 [INFO][3735] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.130 [INFO][3735] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082 Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.133 [INFO][3735] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.138 [INFO][3735] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.138 [INFO][3735] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" host="localhost" Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.138 [INFO][3735] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:15.160566 env[1219]: 2025-07-15 11:20:15.138 [INFO][3735] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" HandleID="k8s-pod-network.3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.161218 env[1219]: 2025-07-15 11:20:15.141 [INFO][3715] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"e99c048a-b44e-4e49-b8a2-60d71754b9a4", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-65795b46b6-75csc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3e1099d7e9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:15.161218 env[1219]: 2025-07-15 11:20:15.141 [INFO][3715] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.161218 env[1219]: 2025-07-15 11:20:15.141 [INFO][3715] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid3e1099d7e9 ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.161218 env[1219]: 2025-07-15 11:20:15.148 [INFO][3715] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.161218 env[1219]: 2025-07-15 11:20:15.149 [INFO][3715] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"e99c048a-b44e-4e49-b8a2-60d71754b9a4", ResourceVersion:"946", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082", Pod:"calico-apiserver-65795b46b6-75csc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3e1099d7e9", MAC:"b2:7c:9b:d2:8f:7d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:15.161218 env[1219]: 2025-07-15 11:20:15.156 [INFO][3715] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-75csc" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:15.170000 audit[3755]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=3755 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:15.170000 audit[3755]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28208 a0=3 a1=ffffded8f460 a2=0 a3=ffff91c23fa8 items=0 ppid=3270 pid=3755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.170000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:15.175360 env[1219]: time="2025-07-15T11:20:15.175277539Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:15.175360 env[1219]: time="2025-07-15T11:20:15.175325699Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:15.175360 env[1219]: time="2025-07-15T11:20:15.175336578Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:15.175572 env[1219]: time="2025-07-15T11:20:15.175530256Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082 pid=3763 runtime=io.containerd.runc.v2 Jul 15 11:20:15.185853 systemd[1]: Started cri-containerd-3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082.scope. Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.209000 audit: BPF prog-id=170 op=LOAD Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3763 pid=3772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313565393136636233373432343737623036313963346138656166 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3763 pid=3772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313565393136636233373432343737623036313963346138656166 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit: BPF prog-id=171 op=LOAD Jul 15 11:20:15.210000 audit[3772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3763 pid=3772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313565393136636233373432343737623036313963346138656166 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit: BPF prog-id=172 op=LOAD Jul 15 11:20:15.210000 audit[3772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3763 pid=3772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313565393136636233373432343737623036313963346138656166 Jul 15 11:20:15.210000 audit: BPF prog-id=172 op=UNLOAD Jul 15 11:20:15.210000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { perfmon } for pid=3772 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit[3772]: AVC avc: denied { bpf } for pid=3772 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:15.210000 audit: BPF prog-id=173 op=LOAD Jul 15 11:20:15.210000 audit[3772]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3763 pid=3772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:15.210000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365313565393136636233373432343737623036313963346138656166 Jul 15 11:20:15.213152 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:15.229019 env[1219]: time="2025-07-15T11:20:15.228957004Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-75csc,Uid:e99c048a-b44e-4e49-b8a2-60d71754b9a4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082\"" Jul 15 11:20:15.230470 env[1219]: time="2025-07-15T11:20:15.230437307Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:20:15.785018 systemd[1]: run-containerd-runc-k8s.io-042724aed3c75c687fc597f06a67d615f5d393df2cdff9247692dfcc428ace08-runc.cBSbDe.mount: Deactivated successfully. Jul 15 11:20:15.785113 systemd[1]: run-netns-cni\x2db9b67dfc\x2d01cb\x2dfbd3\x2db7a9\x2d1ef6867b8dd7.mount: Deactivated successfully. Jul 15 11:20:16.854955 systemd-networkd[1044]: calid3e1099d7e9: Gained IPv6LL Jul 15 11:20:16.882379 env[1219]: time="2025-07-15T11:20:16.882327934Z" level=info msg="StopPodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\"" Jul 15 11:20:16.882895 env[1219]: time="2025-07-15T11:20:16.882860408Z" level=info msg="StopPodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\"" Jul 15 11:20:16.883724 env[1219]: time="2025-07-15T11:20:16.882964927Z" level=info msg="StopPodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\"" Jul 15 11:20:16.893529 env[1219]: time="2025-07-15T11:20:16.882353893Z" level=info msg="StopPodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\"" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:16.969 [INFO][3859] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:16.969 [INFO][3859] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" iface="eth0" netns="/var/run/netns/cni-4d2c3034-b929-8ecb-9484-814fb6154917" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:16.969 [INFO][3859] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" iface="eth0" netns="/var/run/netns/cni-4d2c3034-b929-8ecb-9484-814fb6154917" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:16.970 [INFO][3859] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" iface="eth0" netns="/var/run/netns/cni-4d2c3034-b929-8ecb-9484-814fb6154917" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:16.970 [INFO][3859] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:16.970 [INFO][3859] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.028 [INFO][3878] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.028 [INFO][3878] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.028 [INFO][3878] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.038 [WARNING][3878] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.038 [INFO][3878] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.040 [INFO][3878] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.048958 env[1219]: 2025-07-15 11:20:17.041 [INFO][3859] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:17.049841 env[1219]: time="2025-07-15T11:20:17.049782410Z" level=info msg="TearDown network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" successfully" Jul 15 11:20:17.049901 env[1219]: time="2025-07-15T11:20:17.049843449Z" level=info msg="StopPodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" returns successfully" Jul 15 11:20:17.051267 systemd[1]: run-netns-cni\x2d4d2c3034\x2db929\x2d8ecb\x2d9484\x2d814fb6154917.mount: Deactivated successfully. Jul 15 11:20:17.051593 kubelet[1951]: E0715 11:20:17.051530 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:17.054090 env[1219]: time="2025-07-15T11:20:17.054051844Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mn59l,Uid:3406aa9f-b094-4101-a7eb-585fe64d1723,Namespace:kube-system,Attempt:1,}" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:16.975 [INFO][3844] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:16.975 [INFO][3844] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" iface="eth0" netns="/var/run/netns/cni-026f1232-4502-bbb0-1d32-c316807804f7" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:16.975 [INFO][3844] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" iface="eth0" netns="/var/run/netns/cni-026f1232-4502-bbb0-1d32-c316807804f7" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:16.975 [INFO][3844] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" iface="eth0" netns="/var/run/netns/cni-026f1232-4502-bbb0-1d32-c316807804f7" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:16.975 [INFO][3844] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:16.975 [INFO][3844] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.030 [INFO][3886] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.030 [INFO][3886] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.040 [INFO][3886] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.052 [WARNING][3886] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.052 [INFO][3886] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.057 [INFO][3886] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.064550 env[1219]: 2025-07-15 11:20:17.062 [INFO][3844] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:17.066791 systemd[1]: run-netns-cni\x2d026f1232\x2d4502\x2dbbb0\x2d1d32\x2dc316807804f7.mount: Deactivated successfully. Jul 15 11:20:17.067604 env[1219]: time="2025-07-15T11:20:17.067530418Z" level=info msg="TearDown network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" successfully" Jul 15 11:20:17.067604 env[1219]: time="2025-07-15T11:20:17.067572738Z" level=info msg="StopPodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" returns successfully" Jul 15 11:20:17.068849 kubelet[1951]: E0715 11:20:17.067903 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:17.068950 env[1219]: time="2025-07-15T11:20:17.068644486Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cpqd8,Uid:10b9f436-677d-447b-8404-d1b1a0388753,Namespace:kube-system,Attempt:1,}" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:16.971 [INFO][3850] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:16.972 [INFO][3850] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" iface="eth0" netns="/var/run/netns/cni-8ceb9c49-dc37-689a-598f-dfa19e06e0a0" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:16.972 [INFO][3850] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" iface="eth0" netns="/var/run/netns/cni-8ceb9c49-dc37-689a-598f-dfa19e06e0a0" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:16.973 [INFO][3850] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" iface="eth0" netns="/var/run/netns/cni-8ceb9c49-dc37-689a-598f-dfa19e06e0a0" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:16.973 [INFO][3850] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:16.973 [INFO][3850] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.035 [INFO][3884] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.035 [INFO][3884] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.057 [INFO][3884] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.067 [WARNING][3884] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.069 [INFO][3884] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.071 [INFO][3884] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.086008 env[1219]: 2025-07-15 11:20:17.079 [INFO][3850] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:17.086745 env[1219]: time="2025-07-15T11:20:17.086709812Z" level=info msg="TearDown network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" successfully" Jul 15 11:20:17.086933 env[1219]: time="2025-07-15T11:20:17.086834570Z" level=info msg="StopPodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" returns successfully" Jul 15 11:20:17.088459 systemd[1]: run-netns-cni\x2d8ceb9c49\x2ddc37\x2d689a\x2d598f\x2ddfa19e06e0a0.mount: Deactivated successfully. Jul 15 11:20:17.090785 env[1219]: time="2025-07-15T11:20:17.090529891Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-7xgn9,Uid:0aa73792-5e92-42aa-b561-b947928db919,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:16.990 [INFO][3849] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:16.991 [INFO][3849] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" iface="eth0" netns="/var/run/netns/cni-1ff3a94d-ee3d-fc5e-ec60-f2da4a837d38" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:16.991 [INFO][3849] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" iface="eth0" netns="/var/run/netns/cni-1ff3a94d-ee3d-fc5e-ec60-f2da4a837d38" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:16.991 [INFO][3849] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" iface="eth0" netns="/var/run/netns/cni-1ff3a94d-ee3d-fc5e-ec60-f2da4a837d38" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:16.991 [INFO][3849] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:16.991 [INFO][3849] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.038 [INFO][3897] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.038 [INFO][3897] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.071 [INFO][3897] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.089 [WARNING][3897] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.089 [INFO][3897] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.091 [INFO][3897] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.098237 env[1219]: 2025-07-15 11:20:17.094 [INFO][3849] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:17.098852 env[1219]: time="2025-07-15T11:20:17.098820681Z" level=info msg="TearDown network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" successfully" Jul 15 11:20:17.098943 env[1219]: time="2025-07-15T11:20:17.098924400Z" level=info msg="StopPodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" returns successfully" Jul 15 11:20:17.102595 env[1219]: time="2025-07-15T11:20:17.102553761Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wdnmw,Uid:21108302-e040-4ff9-9142-3ed8f4d8bfc8,Namespace:calico-system,Attempt:1,}" Jul 15 11:20:17.270741 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:20:17.270914 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali13f53518321: link becomes ready Jul 15 11:20:17.269021 systemd-networkd[1044]: cali13f53518321: Link UP Jul 15 11:20:17.270168 systemd-networkd[1044]: cali13f53518321: Gained carrier Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.134 [INFO][3921] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0 coredns-7c65d6cfc9- kube-system 10b9f436-677d-447b-8404-d1b1a0388753 972 0 2025-07-15 11:19:44 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-cpqd8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali13f53518321 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.134 [INFO][3921] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.198 [INFO][3974] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" HandleID="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.198 [INFO][3974] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" HandleID="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3280), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-cpqd8", "timestamp":"2025-07-15 11:20:17.198481927 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.198 [INFO][3974] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.198 [INFO][3974] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.198 [INFO][3974] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.218 [INFO][3974] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.227 [INFO][3974] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.232 [INFO][3974] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.244 [INFO][3974] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.246 [INFO][3974] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.246 [INFO][3974] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.248 [INFO][3974] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88 Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.251 [INFO][3974] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.260 [INFO][3974] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.260 [INFO][3974] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" host="localhost" Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.260 [INFO][3974] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.289058 env[1219]: 2025-07-15 11:20:17.260 [INFO][3974] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" HandleID="k8s-pod-network.0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.289748 env[1219]: 2025-07-15 11:20:17.266 [INFO][3921] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"10b9f436-677d-447b-8404-d1b1a0388753", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-cpqd8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13f53518321", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.289748 env[1219]: 2025-07-15 11:20:17.266 [INFO][3921] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.289748 env[1219]: 2025-07-15 11:20:17.266 [INFO][3921] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali13f53518321 ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.289748 env[1219]: 2025-07-15 11:20:17.270 [INFO][3921] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.289748 env[1219]: 2025-07-15 11:20:17.270 [INFO][3921] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"10b9f436-677d-447b-8404-d1b1a0388753", ResourceVersion:"972", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88", Pod:"coredns-7c65d6cfc9-cpqd8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13f53518321", MAC:"e2:04:01:88:72:39", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.289748 env[1219]: 2025-07-15 11:20:17.286 [INFO][3921] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88" Namespace="kube-system" Pod="coredns-7c65d6cfc9-cpqd8" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:17.296000 audit[4011]: NETFILTER_CFG table=filter:109 family=2 entries=46 op=nft_register_chain pid=4011 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:17.296000 audit[4011]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23740 a0=3 a1=ffffcf833a40 a2=0 a3=ffff9e1dbfa8 items=0 ppid=3270 pid=4011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.296000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:17.369826 systemd-networkd[1044]: calid515b47982a: Link UP Jul 15 11:20:17.371503 systemd-networkd[1044]: calid515b47982a: Gained carrier Jul 15 11:20:17.371843 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid515b47982a: link becomes ready Jul 15 11:20:17.392014 env[1219]: time="2025-07-15T11:20:17.387838126Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:17.392014 env[1219]: time="2025-07-15T11:20:17.387880206Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:17.392014 env[1219]: time="2025-07-15T11:20:17.387891086Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:17.392014 env[1219]: time="2025-07-15T11:20:17.388031044Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88 pid=4020 runtime=io.containerd.runc.v2 Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.150 [INFO][3915] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0 coredns-7c65d6cfc9- kube-system 3406aa9f-b094-4101-a7eb-585fe64d1723 970 0 2025-07-15 11:19:44 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-mn59l eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calid515b47982a [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.150 [INFO][3915] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.208 [INFO][3968] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" HandleID="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.208 [INFO][3968] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" HandleID="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x4000136720), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-mn59l", "timestamp":"2025-07-15 11:20:17.208279981 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.208 [INFO][3968] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.260 [INFO][3968] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.260 [INFO][3968] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.318 [INFO][3968] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.337 [INFO][3968] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.341 [INFO][3968] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.343 [INFO][3968] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.345 [INFO][3968] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.345 [INFO][3968] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.346 [INFO][3968] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.354 [INFO][3968] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.361 [INFO][3968] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.361 [INFO][3968] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" host="localhost" Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.361 [INFO][3968] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.392014 env[1219]: 2025-07-15 11:20:17.361 [INFO][3968] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" HandleID="k8s-pod-network.d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.392671 env[1219]: 2025-07-15 11:20:17.366 [INFO][3915] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3406aa9f-b094-4101-a7eb-585fe64d1723", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-mn59l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid515b47982a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.392671 env[1219]: 2025-07-15 11:20:17.367 [INFO][3915] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.392671 env[1219]: 2025-07-15 11:20:17.367 [INFO][3915] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid515b47982a ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.392671 env[1219]: 2025-07-15 11:20:17.371 [INFO][3915] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.392671 env[1219]: 2025-07-15 11:20:17.372 [INFO][3915] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3406aa9f-b094-4101-a7eb-585fe64d1723", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb", Pod:"coredns-7c65d6cfc9-mn59l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid515b47982a", MAC:"4a:9a:f6:e2:4c:39", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.392671 env[1219]: 2025-07-15 11:20:17.386 [INFO][3915] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb" Namespace="kube-system" Pod="coredns-7c65d6cfc9-mn59l" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:17.430105 systemd[1]: Started cri-containerd-0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88.scope. Jul 15 11:20:17.440000 audit[4049]: NETFILTER_CFG table=filter:110 family=2 entries=46 op=nft_register_chain pid=4049 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:17.440000 audit[4049]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=23196 a0=3 a1=fffff2da5680 a2=0 a3=ffffbbcaafa8 items=0 ppid=3270 pid=4049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.440000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:17.449556 env[1219]: time="2025-07-15T11:20:17.449460702Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:17.449556 env[1219]: time="2025-07-15T11:20:17.449503062Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:17.449556 env[1219]: time="2025-07-15T11:20:17.449513181Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:17.449779 env[1219]: time="2025-07-15T11:20:17.449617740Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb pid=4060 runtime=io.containerd.runc.v2 Jul 15 11:20:17.476988 systemd[1]: Started cri-containerd-d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb.scope. Jul 15 11:20:17.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.486000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.487000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.487000 audit: BPF prog-id=174 op=LOAD Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4020 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062316536386432623161393232313761623831643037666138353739 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4020 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062316536386432623161393232313761623831643037666138353739 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.489000 audit: BPF prog-id=175 op=LOAD Jul 15 11:20:17.489000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4020 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.489000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062316536386432623161393232313761623831643037666138353739 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.491000 audit: BPF prog-id=176 op=LOAD Jul 15 11:20:17.491000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4020 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.491000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062316536386432623161393232313761623831643037666138353739 Jul 15 11:20:17.491000 audit: BPF prog-id=176 op=UNLOAD Jul 15 11:20:17.492000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { perfmon } for pid=4035 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit[4035]: AVC avc: denied { bpf } for pid=4035 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.492000 audit: BPF prog-id=177 op=LOAD Jul 15 11:20:17.492000 audit[4035]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4020 pid=4035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.492000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062316536386432623161393232313761623831643037666138353739 Jul 15 11:20:17.498690 systemd-networkd[1044]: cali7709a8e9967: Link UP Jul 15 11:20:17.499001 env[1219]: time="2025-07-15T11:20:17.498967328Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:17.501733 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:17.502166 systemd-networkd[1044]: cali7709a8e9967: Gained carrier Jul 15 11:20:17.502900 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7709a8e9967: link becomes ready Jul 15 11:20:17.516038 env[1219]: time="2025-07-15T11:20:17.515999625Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.195 [INFO][3939] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0 goldmane-58fd7646b9- calico-system 21108302-e040-4ff9-9142-3ed8f4d8bfc8 973 0 2025-07-15 11:19:55 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-wdnmw eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali7709a8e9967 [] [] }} ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.196 [INFO][3939] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.246 [INFO][3987] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" HandleID="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.247 [INFO][3987] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" HandleID="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a2e30), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-wdnmw", "timestamp":"2025-07-15 11:20:17.246905205 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.247 [INFO][3987] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.361 [INFO][3987] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.361 [INFO][3987] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.427 [INFO][3987] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.450 [INFO][3987] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.461 [INFO][3987] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.471 [INFO][3987] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.474 [INFO][3987] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.474 [INFO][3987] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.476 [INFO][3987] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.484 [INFO][3987] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.492 [INFO][3987] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.492 [INFO][3987] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" host="localhost" Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.492 [INFO][3987] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.522249 env[1219]: 2025-07-15 11:20:17.492 [INFO][3987] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" HandleID="k8s-pod-network.8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.522782 env[1219]: 2025-07-15 11:20:17.495 [INFO][3939] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"21108302-e040-4ff9-9142-3ed8f4d8bfc8", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-wdnmw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali7709a8e9967", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.522782 env[1219]: 2025-07-15 11:20:17.495 [INFO][3939] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.522782 env[1219]: 2025-07-15 11:20:17.495 [INFO][3939] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7709a8e9967 ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.522782 env[1219]: 2025-07-15 11:20:17.502 [INFO][3939] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.522782 env[1219]: 2025-07-15 11:20:17.504 [INFO][3939] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"21108302-e040-4ff9-9142-3ed8f4d8bfc8", ResourceVersion:"973", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc", Pod:"goldmane-58fd7646b9-wdnmw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali7709a8e9967", MAC:"0e:1d:b7:85:e1:1c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.522782 env[1219]: 2025-07-15 11:20:17.518 [INFO][3939] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc" Namespace="calico-system" Pod="goldmane-58fd7646b9-wdnmw" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:17.525674 env[1219]: time="2025-07-15T11:20:17.523180268Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:17.525674 env[1219]: time="2025-07-15T11:20:17.525312165Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:17.527516 env[1219]: time="2025-07-15T11:20:17.526795349Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 15 11:20:17.532081 env[1219]: time="2025-07-15T11:20:17.531403179Z" level=info msg="CreateContainer within sandbox \"3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit: BPF prog-id=178 op=LOAD Jul 15 11:20:17.533000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.533000 audit[4075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4060 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.533000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356238323062656232343334356437663564316366353266636436 Jul 15 11:20:17.534000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.534000 audit[4075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4060 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356238323062656232343334356437663564316366353266636436 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.535000 audit: BPF prog-id=179 op=LOAD Jul 15 11:20:17.535000 audit[4075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4060 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356238323062656232343334356437663564316366353266636436 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4107]: NETFILTER_CFG table=filter:111 family=2 entries=52 op=nft_register_chain pid=4107 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.536000 audit[4107]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27540 a0=3 a1=ffffc0791560 a2=0 a3=ffff9cebcfa8 items=0 ppid=3270 pid=4107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.536000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:17.536000 audit: BPF prog-id=180 op=LOAD Jul 15 11:20:17.536000 audit[4075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4060 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.536000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356238323062656232343334356437663564316366353266636436 Jul 15 11:20:17.537000 audit: BPF prog-id=180 op=UNLOAD Jul 15 11:20:17.537000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { perfmon } for pid=4075 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit[4075]: AVC avc: denied { bpf } for pid=4075 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.537000 audit: BPF prog-id=181 op=LOAD Jul 15 11:20:17.537000 audit[4075]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4060 pid=4075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.537000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356238323062656232343334356437663564316366353266636436 Jul 15 11:20:17.541833 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:17.544148 env[1219]: time="2025-07-15T11:20:17.544098242Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-cpqd8,Uid:10b9f436-677d-447b-8404-d1b1a0388753,Namespace:kube-system,Attempt:1,} returns sandbox id \"0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88\"" Jul 15 11:20:17.546102 env[1219]: time="2025-07-15T11:20:17.544979153Z" level=info msg="CreateContainer within sandbox \"3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ed692180d65dd549e92c28b64c9eacdac38161dc6b86488a8f36bade8dfeccc8\"" Jul 15 11:20:17.546212 kubelet[1951]: E0715 11:20:17.545027 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:17.546693 env[1219]: time="2025-07-15T11:20:17.546643335Z" level=info msg="StartContainer for \"ed692180d65dd549e92c28b64c9eacdac38161dc6b86488a8f36bade8dfeccc8\"" Jul 15 11:20:17.549388 env[1219]: time="2025-07-15T11:20:17.549347105Z" level=info msg="CreateContainer within sandbox \"0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:20:17.556937 env[1219]: time="2025-07-15T11:20:17.556411709Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:17.556937 env[1219]: time="2025-07-15T11:20:17.556487669Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:17.556937 env[1219]: time="2025-07-15T11:20:17.556514788Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:17.556937 env[1219]: time="2025-07-15T11:20:17.556668907Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc pid=4113 runtime=io.containerd.runc.v2 Jul 15 11:20:17.566125 env[1219]: time="2025-07-15T11:20:17.566078125Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-mn59l,Uid:3406aa9f-b094-4101-a7eb-585fe64d1723,Namespace:kube-system,Attempt:1,} returns sandbox id \"d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb\"" Jul 15 11:20:17.567660 kubelet[1951]: E0715 11:20:17.567271 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:17.570410 systemd[1]: Started cri-containerd-8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc.scope. Jul 15 11:20:17.575630 env[1219]: time="2025-07-15T11:20:17.575592743Z" level=info msg="CreateContainer within sandbox \"d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:20:17.589053 env[1219]: time="2025-07-15T11:20:17.589001678Z" level=info msg="CreateContainer within sandbox \"0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c26f872a1ea763762c7605e00cc24f248b437222c7655297a367376fd080b73f\"" Jul 15 11:20:17.589053 env[1219]: time="2025-07-15T11:20:17.589877029Z" level=info msg="StartContainer for \"c26f872a1ea763762c7605e00cc24f248b437222c7655297a367376fd080b73f\"" Jul 15 11:20:17.600506 env[1219]: time="2025-07-15T11:20:17.600441915Z" level=info msg="CreateContainer within sandbox \"d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"59f5712d795541a65f3b92aa10d73184f8c3c8e443eb4cf2b197b037a74a2302\"" Jul 15 11:20:17.600852 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calic1ef52f6d8a: link becomes ready Jul 15 11:20:17.601112 systemd-networkd[1044]: calic1ef52f6d8a: Link UP Jul 15 11:20:17.601673 systemd-networkd[1044]: calic1ef52f6d8a: Gained carrier Jul 15 11:20:17.614318 env[1219]: time="2025-07-15T11:20:17.614283766Z" level=info msg="StartContainer for \"59f5712d795541a65f3b92aa10d73184f8c3c8e443eb4cf2b197b037a74a2302\"" Jul 15 11:20:17.614522 systemd[1]: Started cri-containerd-ed692180d65dd549e92c28b64c9eacdac38161dc6b86488a8f36bade8dfeccc8.scope. Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.613000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.614000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.614000 audit: BPF prog-id=182 op=LOAD Jul 15 11:20:17.614000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.614000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4113 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343466303831396332386135386366626132336331666564373461 Jul 15 11:20:17.614000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.614000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4113 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.614000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343466303831396332386135386366626132336331666564373461 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit: BPF prog-id=183 op=LOAD Jul 15 11:20:17.615000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4113 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343466303831396332386135386366626132336331666564373461 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit: BPF prog-id=184 op=LOAD Jul 15 11:20:17.615000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4113 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343466303831396332386135386366626132336331666564373461 Jul 15 11:20:17.615000 audit: BPF prog-id=184 op=UNLOAD Jul 15 11:20:17.615000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { perfmon } for pid=4131 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit[4131]: AVC avc: denied { bpf } for pid=4131 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.615000 audit: BPF prog-id=185 op=LOAD Jul 15 11:20:17.615000 audit[4131]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4113 pid=4131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.615000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863343466303831396332386135386366626132336331666564373461 Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.195 [INFO][3936] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0 calico-apiserver-65795b46b6- calico-apiserver 0aa73792-5e92-42aa-b561-b947928db919 971 0 2025-07-15 11:19:52 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:65795b46b6 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-65795b46b6-7xgn9 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calic1ef52f6d8a [] [] }} ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.195 [INFO][3936] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.257 [INFO][3989] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" HandleID="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.257 [INFO][3989] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" HandleID="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001377d0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-65795b46b6-7xgn9", "timestamp":"2025-07-15 11:20:17.257249494 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.257 [INFO][3989] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.492 [INFO][3989] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.492 [INFO][3989] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.527 [INFO][3989] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.536 [INFO][3989] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.559 [INFO][3989] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.561 [INFO][3989] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.565 [INFO][3989] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.566 [INFO][3989] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.568 [INFO][3989] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742 Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.578 [INFO][3989] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.585 [INFO][3989] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.585 [INFO][3989] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" host="localhost" Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.585 [INFO][3989] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:17.621955 env[1219]: 2025-07-15 11:20:17.585 [INFO][3989] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" HandleID="k8s-pod-network.027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.622525 env[1219]: 2025-07-15 11:20:17.587 [INFO][3936] cni-plugin/k8s.go 418: Populated endpoint ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"0aa73792-5e92-42aa-b561-b947928db919", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-65795b46b6-7xgn9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic1ef52f6d8a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.622525 env[1219]: 2025-07-15 11:20:17.588 [INFO][3936] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.622525 env[1219]: 2025-07-15 11:20:17.588 [INFO][3936] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calic1ef52f6d8a ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.622525 env[1219]: 2025-07-15 11:20:17.603 [INFO][3936] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.622525 env[1219]: 2025-07-15 11:20:17.603 [INFO][3936] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"0aa73792-5e92-42aa-b561-b947928db919", ResourceVersion:"971", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742", Pod:"calico-apiserver-65795b46b6-7xgn9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic1ef52f6d8a", MAC:"ba:d6:23:08:1d:c5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:17.622525 env[1219]: 2025-07-15 11:20:17.613 [INFO][3936] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742" Namespace="calico-apiserver" Pod="calico-apiserver-65795b46b6-7xgn9" WorkloadEndpoint="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:17.627121 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:17.641000 audit[4204]: NETFILTER_CFG table=filter:112 family=2 entries=49 op=nft_register_chain pid=4204 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:17.641000 audit[4204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=25436 a0=3 a1=ffffc8e9ac10 a2=0 a3=ffff89ee5fa8 items=0 ppid=3270 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.641000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:17.649176 systemd[1]: Started cri-containerd-c26f872a1ea763762c7605e00cc24f248b437222c7655297a367376fd080b73f.scope. Jul 15 11:20:17.653549 env[1219]: time="2025-07-15T11:20:17.651024610Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:17.653549 env[1219]: time="2025-07-15T11:20:17.651082329Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:17.653549 env[1219]: time="2025-07-15T11:20:17.651092689Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:17.653549 env[1219]: time="2025-07-15T11:20:17.651289727Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742 pid=4227 runtime=io.containerd.runc.v2 Jul 15 11:20:17.655952 env[1219]: time="2025-07-15T11:20:17.655907357Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-wdnmw,Uid:21108302-e040-4ff9-9142-3ed8f4d8bfc8,Namespace:calico-system,Attempt:1,} returns sandbox id \"8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc\"" Jul 15 11:20:17.658700 systemd[1]: Started cri-containerd-59f5712d795541a65f3b92aa10d73184f8c3c8e443eb4cf2b197b037a74a2302.scope. Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.665000 audit: BPF prog-id=186 op=LOAD Jul 15 11:20:17.669896 env[1219]: time="2025-07-15T11:20:17.669857647Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:20:17.668000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.668000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000149b38 a2=10 a3=0 items=0 ppid=3763 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363932313830643635646435343965393263323862363463396561 Jul 15 11:20:17.668000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.668000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001495a0 a2=3c a3=0 items=0 ppid=3763 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.668000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363932313830643635646435343965393263323862363463396561 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.669000 audit: BPF prog-id=187 op=LOAD Jul 15 11:20:17.669000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001498e0 a2=78 a3=0 items=0 ppid=3763 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.669000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363932313830643635646435343965393263323862363463396561 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.673000 audit: BPF prog-id=188 op=LOAD Jul 15 11:20:17.673000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000149670 a2=78 a3=0 items=0 ppid=3763 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.673000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363932313830643635646435343965393263323862363463396561 Jul 15 11:20:17.675000 audit: BPF prog-id=188 op=UNLOAD Jul 15 11:20:17.675000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { perfmon } for pid=4129 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit[4129]: AVC avc: denied { bpf } for pid=4129 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.675000 audit: BPF prog-id=189 op=LOAD Jul 15 11:20:17.675000 audit[4129]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000149b40 a2=78 a3=0 items=0 ppid=3763 pid=4129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6564363932313830643635646435343965393263323862363463396561 Jul 15 11:20:17.681266 systemd[1]: Started cri-containerd-027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742.scope. Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.686000 audit: BPF prog-id=190 op=LOAD Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4020 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332366638373261316561373633373632633736303565303063633234 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4020 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332366638373261316561373633373632633736303565303063633234 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.687000 audit: BPF prog-id=191 op=LOAD Jul 15 11:20:17.687000 audit[4172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4020 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332366638373261316561373633373632633736303565303063633234 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit: BPF prog-id=192 op=LOAD Jul 15 11:20:17.690000 audit[4172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4020 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332366638373261316561373633373632633736303565303063633234 Jul 15 11:20:17.690000 audit: BPF prog-id=192 op=UNLOAD Jul 15 11:20:17.690000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { perfmon } for pid=4172 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit[4172]: AVC avc: denied { bpf } for pid=4172 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.690000 audit: BPF prog-id=193 op=LOAD Jul 15 11:20:17.690000 audit[4172]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4020 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.690000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332366638373261316561373633373632633736303565303063633234 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.700000 audit: BPF prog-id=194 op=LOAD Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=400011db38 a2=10 a3=0 items=0 ppid=4060 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663537313264373935353431613635663362393261613130643733 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=400011d5a0 a2=3c a3=0 items=0 ppid=4060 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663537313264373935353431613635663362393261613130643733 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit: BPF prog-id=195 op=LOAD Jul 15 11:20:17.701000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011d8e0 a2=78 a3=0 items=0 ppid=4060 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663537313264373935353431613635663362393261613130643733 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.701000 audit: BPF prog-id=196 op=LOAD Jul 15 11:20:17.701000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=400011d670 a2=78 a3=0 items=0 ppid=4060 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.701000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663537313264373935353431613635663362393261613130643733 Jul 15 11:20:17.701000 audit: BPF prog-id=196 op=UNLOAD Jul 15 11:20:17.701000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { perfmon } for pid=4201 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit[4201]: AVC avc: denied { bpf } for pid=4201 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.702000 audit: BPF prog-id=197 op=LOAD Jul 15 11:20:17.702000 audit[4201]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=400011db40 a2=78 a3=0 items=0 ppid=4060 pid=4201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.702000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3539663537313264373935353431613635663362393261613130643733 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.708000 audit: BPF prog-id=198 op=LOAD Jul 15 11:20:17.709000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.709000 audit[4243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4227 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373439306633613234333331326364383134646435633036333564 Jul 15 11:20:17.709000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.709000 audit[4243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4227 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373439306633613234333331326364383134646435633036333564 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit: BPF prog-id=199 op=LOAD Jul 15 11:20:17.710000 audit[4243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4227 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373439306633613234333331326364383134646435633036333564 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.710000 audit: BPF prog-id=200 op=LOAD Jul 15 11:20:17.710000 audit[4243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4227 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.710000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373439306633613234333331326364383134646435633036333564 Jul 15 11:20:17.711000 audit: BPF prog-id=200 op=UNLOAD Jul 15 11:20:17.711000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { perfmon } for pid=4243 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit[4243]: AVC avc: denied { bpf } for pid=4243 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.711000 audit: BPF prog-id=201 op=LOAD Jul 15 11:20:17.711000 audit[4243]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4227 pid=4243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.711000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3032373439306633613234333331326364383134646435633036333564 Jul 15 11:20:17.714870 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:17.722741 env[1219]: time="2025-07-15T11:20:17.722548119Z" level=info msg="StartContainer for \"ed692180d65dd549e92c28b64c9eacdac38161dc6b86488a8f36bade8dfeccc8\" returns successfully" Jul 15 11:20:17.728747 env[1219]: time="2025-07-15T11:20:17.728706652Z" level=info msg="StartContainer for \"c26f872a1ea763762c7605e00cc24f248b437222c7655297a367376fd080b73f\" returns successfully" Jul 15 11:20:17.730134 env[1219]: time="2025-07-15T11:20:17.729957199Z" level=info msg="StartContainer for \"59f5712d795541a65f3b92aa10d73184f8c3c8e443eb4cf2b197b037a74a2302\" returns successfully" Jul 15 11:20:17.755272 env[1219]: time="2025-07-15T11:20:17.755228606Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-65795b46b6-7xgn9,Uid:0aa73792-5e92-42aa-b561-b947928db919,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742\"" Jul 15 11:20:17.759008 env[1219]: time="2025-07-15T11:20:17.758972846Z" level=info msg="CreateContainer within sandbox \"027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:20:17.777253 env[1219]: time="2025-07-15T11:20:17.777168970Z" level=info msg="CreateContainer within sandbox \"027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"49cbf138a5e65c1f75833c621fa247bb825c78be926803fbd4fa748a38bcf6d0\"" Jul 15 11:20:17.779300 env[1219]: time="2025-07-15T11:20:17.779263387Z" level=info msg="StartContainer for \"49cbf138a5e65c1f75833c621fa247bb825c78be926803fbd4fa748a38bcf6d0\"" Jul 15 11:20:17.811630 systemd[1]: Started cri-containerd-49cbf138a5e65c1f75833c621fa247bb825c78be926803fbd4fa748a38bcf6d0.scope. Jul 15 11:20:17.826000 audit[4240]: AVC avc: denied { getattr } for pid=4240 comm="coredns" path="cgroup:[4026532332]" dev="nsfs" ino=4026532332 scontext=system_u:system_r:svirt_lxc_net_t:s0:c444,c783 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:20:17.826000 audit[4240]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000154bb8 a2=4000156578 a3=0 items=0 ppid=4020 pid=4240 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c444,c783 key=(null) Jul 15 11:20:17.826000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:20:17.826000 audit[4259]: AVC avc: denied { getattr } for pid=4259 comm="coredns" path="cgroup:[4026532335]" dev="nsfs" ino=4026532335 scontext=system_u:system_r:svirt_lxc_net_t:s0:c820,c956 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:20:17.826000 audit[4259]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000056948 a2=40000da578 a3=0 items=0 ppid=4060 pid=4259 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c820,c956 key=(null) Jul 15 11:20:17.826000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.836000 audit: BPF prog-id=202 op=LOAD Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4227 pid=4315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439636266313338613565363563316637353833336336323166613234 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4227 pid=4315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439636266313338613565363563316637353833336336323166613234 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.837000 audit: BPF prog-id=203 op=LOAD Jul 15 11:20:17.837000 audit[4315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4227 pid=4315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439636266313338613565363563316637353833336336323166613234 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit: BPF prog-id=204 op=LOAD Jul 15 11:20:17.839000 audit[4315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4227 pid=4315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439636266313338613565363563316637353833336336323166613234 Jul 15 11:20:17.839000 audit: BPF prog-id=204 op=UNLOAD Jul 15 11:20:17.839000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { perfmon } for pid=4315 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit[4315]: AVC avc: denied { bpf } for pid=4315 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:17.839000 audit: BPF prog-id=205 op=LOAD Jul 15 11:20:17.839000 audit[4315]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4227 pid=4315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:17.839000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3439636266313338613565363563316637353833336336323166613234 Jul 15 11:20:17.884360 env[1219]: time="2025-07-15T11:20:17.884115697Z" level=info msg="StopPodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\"" Jul 15 11:20:17.884769 env[1219]: time="2025-07-15T11:20:17.884281416Z" level=info msg="StartContainer for \"49cbf138a5e65c1f75833c621fa247bb825c78be926803fbd4fa748a38bcf6d0\" returns successfully" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.966 [INFO][4366] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.966 [INFO][4366] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" iface="eth0" netns="/var/run/netns/cni-ef6eb9e0-fe49-c7cb-78a3-488dcabf08ee" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.966 [INFO][4366] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" iface="eth0" netns="/var/run/netns/cni-ef6eb9e0-fe49-c7cb-78a3-488dcabf08ee" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.966 [INFO][4366] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" iface="eth0" netns="/var/run/netns/cni-ef6eb9e0-fe49-c7cb-78a3-488dcabf08ee" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.966 [INFO][4366] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.966 [INFO][4366] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.985 [INFO][4380] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.986 [INFO][4380] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.986 [INFO][4380] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.996 [WARNING][4380] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.996 [INFO][4380] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:17.997 [INFO][4380] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:18.003247 env[1219]: 2025-07-15 11:20:18.000 [INFO][4366] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:18.003858 env[1219]: time="2025-07-15T11:20:18.003297413Z" level=info msg="TearDown network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" successfully" Jul 15 11:20:18.003858 env[1219]: time="2025-07-15T11:20:18.003326653Z" level=info msg="StopPodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" returns successfully" Jul 15 11:20:18.004213 env[1219]: time="2025-07-15T11:20:18.004180324Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-456pj,Uid:96ed7aff-ca57-4e30-a201-f756b40d3f77,Namespace:calico-system,Attempt:1,}" Jul 15 11:20:18.033731 kubelet[1951]: E0715 11:20:18.033642 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:18.044752 kubelet[1951]: I0715 11:20:18.044696 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-mn59l" podStartSLOduration=34.04468306 podStartE2EDuration="34.04468306s" podCreationTimestamp="2025-07-15 11:19:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:20:18.044320624 +0000 UTC m=+39.253329600" watchObservedRunningTime="2025-07-15 11:20:18.04468306 +0000 UTC m=+39.253691996" Jul 15 11:20:18.060708 systemd[1]: run-netns-cni\x2def6eb9e0\x2dfe49\x2dc7cb\x2d78a3\x2d488dcabf08ee.mount: Deactivated successfully. Jul 15 11:20:18.060792 systemd[1]: run-netns-cni\x2d1ff3a94d\x2dee3d\x2dfc5e\x2dec60\x2df2da4a837d38.mount: Deactivated successfully. Jul 15 11:20:18.064607 kubelet[1951]: E0715 11:20:18.064412 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:18.069000 audit[4402]: NETFILTER_CFG table=filter:113 family=2 entries=18 op=nft_register_rule pid=4402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:18.069000 audit[4402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=fffff98a4a00 a2=0 a3=1 items=0 ppid=2062 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:18.078000 audit[4402]: NETFILTER_CFG table=nat:114 family=2 entries=16 op=nft_register_rule pid=4402 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:18.078000 audit[4402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=fffff98a4a00 a2=0 a3=1 items=0 ppid=2062 pid=4402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.078000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:18.102163 kubelet[1951]: I0715 11:20:18.102095 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-65795b46b6-75csc" podStartSLOduration=23.803493362 podStartE2EDuration="26.102076099s" podCreationTimestamp="2025-07-15 11:19:52 +0000 UTC" firstStartedPulling="2025-07-15 11:20:15.23019391 +0000 UTC m=+36.439202886" lastFinishedPulling="2025-07-15 11:20:17.528776647 +0000 UTC m=+38.737785623" observedRunningTime="2025-07-15 11:20:18.08769401 +0000 UTC m=+39.296702986" watchObservedRunningTime="2025-07-15 11:20:18.102076099 +0000 UTC m=+39.311085075" Jul 15 11:20:18.114518 kubelet[1951]: I0715 11:20:18.114457 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-cpqd8" podStartSLOduration=34.114443929 podStartE2EDuration="34.114443929s" podCreationTimestamp="2025-07-15 11:19:44 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:20:18.102526214 +0000 UTC m=+39.311535190" watchObservedRunningTime="2025-07-15 11:20:18.114443929 +0000 UTC m=+39.323452905" Jul 15 11:20:18.108000 audit[4411]: NETFILTER_CFG table=filter:115 family=2 entries=15 op=nft_register_rule pid=4411 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:18.108000 audit[4411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffff316ee0 a2=0 a3=1 items=0 ppid=2062 pid=4411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.108000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:18.129000 audit[4411]: NETFILTER_CFG table=nat:116 family=2 entries=37 op=nft_register_chain pid=4411 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:18.129000 audit[4411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=ffffff316ee0 a2=0 a3=1 items=0 ppid=2062 pid=4411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.129000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:18.195767 systemd-networkd[1044]: cali4ff98645407: Link UP Jul 15 11:20:18.198447 systemd-networkd[1044]: cali4ff98645407: Gained carrier Jul 15 11:20:18.198938 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4ff98645407: link becomes ready Jul 15 11:20:18.210084 kubelet[1951]: I0715 11:20:18.210027 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-65795b46b6-7xgn9" podStartSLOduration=26.210010769 podStartE2EDuration="26.210010769s" podCreationTimestamp="2025-07-15 11:19:52 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:20:18.115063923 +0000 UTC m=+39.324072899" watchObservedRunningTime="2025-07-15 11:20:18.210010769 +0000 UTC m=+39.419019745" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.085 [INFO][4389] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--456pj-eth0 csi-node-driver- calico-system 96ed7aff-ca57-4e30-a201-f756b40d3f77 1012 0 2025-07-15 11:19:56 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-456pj eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali4ff98645407 [] [] }} ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.085 [INFO][4389] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.134 [INFO][4406] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" HandleID="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.134 [INFO][4406] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" HandleID="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Workload="localhost-k8s-csi--node--driver--456pj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004cab0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-456pj", "timestamp":"2025-07-15 11:20:18.133993285 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.134 [INFO][4406] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.134 [INFO][4406] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.134 [INFO][4406] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.144 [INFO][4406] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.152 [INFO][4406] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.163 [INFO][4406] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.167 [INFO][4406] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.171 [INFO][4406] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.171 [INFO][4406] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.176 [INFO][4406] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.182 [INFO][4406] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.191 [INFO][4406] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.191 [INFO][4406] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" host="localhost" Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.191 [INFO][4406] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:18.215886 env[1219]: 2025-07-15 11:20:18.191 [INFO][4406] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" HandleID="k8s-pod-network.a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.216428 env[1219]: 2025-07-15 11:20:18.193 [INFO][4389] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--456pj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96ed7aff-ca57-4e30-a201-f756b40d3f77", ResourceVersion:"1012", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-456pj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ff98645407", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:18.216428 env[1219]: 2025-07-15 11:20:18.193 [INFO][4389] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.216428 env[1219]: 2025-07-15 11:20:18.193 [INFO][4389] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4ff98645407 ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.216428 env[1219]: 2025-07-15 11:20:18.198 [INFO][4389] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.216428 env[1219]: 2025-07-15 11:20:18.199 [INFO][4389] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--456pj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96ed7aff-ca57-4e30-a201-f756b40d3f77", ResourceVersion:"1012", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c", Pod:"csi-node-driver-456pj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ff98645407", MAC:"6e:5b:98:c0:c6:61", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:18.216428 env[1219]: 2025-07-15 11:20:18.213 [INFO][4389] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c" Namespace="calico-system" Pod="csi-node-driver-456pj" WorkloadEndpoint="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:18.228499 env[1219]: time="2025-07-15T11:20:18.228430656Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:18.228587 env[1219]: time="2025-07-15T11:20:18.228507735Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:18.228587 env[1219]: time="2025-07-15T11:20:18.228533615Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:18.228789 env[1219]: time="2025-07-15T11:20:18.228732813Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c pid=4434 runtime=io.containerd.runc.v2 Jul 15 11:20:18.229000 audit[4432]: NETFILTER_CFG table=filter:117 family=2 entries=52 op=nft_register_chain pid=4432 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:18.229000 audit[4432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=24312 a0=3 a1=ffffec4ce840 a2=0 a3=ffff865aefa8 items=0 ppid=3270 pid=4432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.229000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:18.250062 systemd[1]: run-containerd-runc-k8s.io-a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c-runc.jiwIHX.mount: Deactivated successfully. Jul 15 11:20:18.256005 systemd[1]: Started cri-containerd-a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c.scope. Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.282000 audit: BPF prog-id=206 op=LOAD Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4434 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131386232643435663337623066323231323037346239623863666335 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4434 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131386232643435663337623066323231323037346239623863666335 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit: BPF prog-id=207 op=LOAD Jul 15 11:20:18.283000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4434 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131386232643435663337623066323231323037346239623863666335 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit: BPF prog-id=208 op=LOAD Jul 15 11:20:18.283000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4434 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131386232643435663337623066323231323037346239623863666335 Jul 15 11:20:18.283000 audit: BPF prog-id=208 op=UNLOAD Jul 15 11:20:18.283000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { perfmon } for pid=4444 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit[4444]: AVC avc: denied { bpf } for pid=4444 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:18.283000 audit: BPF prog-id=209 op=LOAD Jul 15 11:20:18.283000 audit[4444]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4434 pid=4444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:18.283000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6131386232643435663337623066323231323037346239623863666335 Jul 15 11:20:18.288059 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:18.302653 env[1219]: time="2025-07-15T11:20:18.302612119Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-456pj,Uid:96ed7aff-ca57-4e30-a201-f756b40d3f77,Namespace:calico-system,Attempt:1,} returns sandbox id \"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c\"" Jul 15 11:20:18.882584 env[1219]: time="2025-07-15T11:20:18.882542166Z" level=info msg="StopPodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\"" Jul 15 11:20:19.031353 systemd-networkd[1044]: calid515b47982a: Gained IPv6LL Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:18.965 [INFO][4476] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:18.965 [INFO][4476] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" iface="eth0" netns="/var/run/netns/cni-1eed9774-a745-b7db-7bfe-5edc03464817" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:18.966 [INFO][4476] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" iface="eth0" netns="/var/run/netns/cni-1eed9774-a745-b7db-7bfe-5edc03464817" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:18.966 [INFO][4476] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" iface="eth0" netns="/var/run/netns/cni-1eed9774-a745-b7db-7bfe-5edc03464817" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:18.966 [INFO][4476] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:18.966 [INFO][4476] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.004 [INFO][4484] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.004 [INFO][4484] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.004 [INFO][4484] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.021 [WARNING][4484] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.021 [INFO][4484] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.023 [INFO][4484] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:19.034911 env[1219]: 2025-07-15 11:20:19.032 [INFO][4476] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:19.035499 env[1219]: time="2025-07-15T11:20:19.035093779Z" level=info msg="TearDown network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" successfully" Jul 15 11:20:19.035499 env[1219]: time="2025-07-15T11:20:19.035129498Z" level=info msg="StopPodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" returns successfully" Jul 15 11:20:19.036143 env[1219]: time="2025-07-15T11:20:19.036104808Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-678dcc9b89-w9brg,Uid:0bbb05f0-6922-4873-997d-efb6a051decc,Namespace:calico-system,Attempt:1,}" Jul 15 11:20:19.052545 systemd[1]: run-netns-cni\x2d1eed9774\x2da745\x2db7db\x2d7bfe\x2d5edc03464817.mount: Deactivated successfully. Jul 15 11:20:19.066460 kubelet[1951]: I0715 11:20:19.066432 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:20:19.066793 kubelet[1951]: E0715 11:20:19.066767 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:19.066925 kubelet[1951]: E0715 11:20:19.066897 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:19.153000 audit[4516]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:19.153000 audit[4516]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffcb540040 a2=0 a3=1 items=0 ppid=2062 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.153000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:19.196241 systemd-networkd[1044]: cali4c3f8412f9d: Link UP Jul 15 11:20:19.198833 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:20:19.198932 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4c3f8412f9d: link becomes ready Jul 15 11:20:19.198960 systemd-networkd[1044]: cali4c3f8412f9d: Gained carrier Jul 15 11:20:19.204000 audit[4516]: NETFILTER_CFG table=nat:119 family=2 entries=58 op=nft_register_chain pid=4516 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:19.204000 audit[4516]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffcb540040 a2=0 a3=1 items=0 ppid=2062 pid=4516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.204000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.090 [INFO][4493] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0 calico-kube-controllers-678dcc9b89- calico-system 0bbb05f0-6922-4873-997d-efb6a051decc 1045 0 2025-07-15 11:19:56 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:678dcc9b89 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-678dcc9b89-w9brg eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali4c3f8412f9d [] [] }} ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.090 [INFO][4493] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.137 [INFO][4507] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" HandleID="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.137 [INFO][4507] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" HandleID="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001366e0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-678dcc9b89-w9brg", "timestamp":"2025-07-15 11:20:19.137722453 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.138 [INFO][4507] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.138 [INFO][4507] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.138 [INFO][4507] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.150 [INFO][4507] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.155 [INFO][4507] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.169 [INFO][4507] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.172 [INFO][4507] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.174 [INFO][4507] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.174 [INFO][4507] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.176 [INFO][4507] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979 Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.183 [INFO][4507] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.189 [INFO][4507] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.189 [INFO][4507] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" host="localhost" Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.189 [INFO][4507] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:19.222538 env[1219]: 2025-07-15 11:20:19.189 [INFO][4507] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" HandleID="k8s-pod-network.b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.223195 env[1219]: 2025-07-15 11:20:19.193 [INFO][4493] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0", GenerateName:"calico-kube-controllers-678dcc9b89-", Namespace:"calico-system", SelfLink:"", UID:"0bbb05f0-6922-4873-997d-efb6a051decc", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"678dcc9b89", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-678dcc9b89-w9brg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c3f8412f9d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:19.223195 env[1219]: 2025-07-15 11:20:19.193 [INFO][4493] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.223195 env[1219]: 2025-07-15 11:20:19.193 [INFO][4493] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4c3f8412f9d ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.223195 env[1219]: 2025-07-15 11:20:19.199 [INFO][4493] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.223195 env[1219]: 2025-07-15 11:20:19.199 [INFO][4493] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0", GenerateName:"calico-kube-controllers-678dcc9b89-", Namespace:"calico-system", SelfLink:"", UID:"0bbb05f0-6922-4873-997d-efb6a051decc", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"678dcc9b89", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979", Pod:"calico-kube-controllers-678dcc9b89-w9brg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c3f8412f9d", MAC:"aa:b7:1a:bd:05:8a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:19.223195 env[1219]: 2025-07-15 11:20:19.216 [INFO][4493] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979" Namespace="calico-system" Pod="calico-kube-controllers-678dcc9b89-w9brg" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:19.226207 systemd-networkd[1044]: cali13f53518321: Gained IPv6LL Jul 15 11:20:19.243000 audit[4175]: AVC avc: denied { watch } for pid=4175 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_20_02.3206130379/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c162,c611 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c162,c611 tclass=file permissive=0 Jul 15 11:20:19.243000 audit[4175]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400073a1e0 a2=fc6 a3=0 items=0 ppid=3763 pid=4175 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c162,c611 key=(null) Jul 15 11:20:19.243000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:20:19.254630 env[1219]: time="2025-07-15T11:20:19.254568263Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:20:19.254748 env[1219]: time="2025-07-15T11:20:19.254609663Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:20:19.254748 env[1219]: time="2025-07-15T11:20:19.254621023Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:20:19.254850 env[1219]: time="2025-07-15T11:20:19.254786821Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979 pid=4534 runtime=io.containerd.runc.v2 Jul 15 11:20:19.263000 audit[4545]: NETFILTER_CFG table=filter:120 family=2 entries=62 op=nft_register_chain pid=4545 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:20:19.263000 audit[4545]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=28352 a0=3 a1=ffffd1180d80 a2=0 a3=ffff8affdfa8 items=0 ppid=3270 pid=4545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.263000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:20:19.279617 systemd[1]: Started cri-containerd-b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979.scope. Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.310000 audit: BPF prog-id=210 op=LOAD Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4534 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236333363323135396363386462333763646164636533363031343035 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4534 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236333363323135396363386462333763646164636533363031343035 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.311000 audit: BPF prog-id=211 op=LOAD Jul 15 11:20:19.311000 audit[4544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4534 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.311000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236333363323135396363386462333763646164636533363031343035 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.312000 audit: BPF prog-id=212 op=LOAD Jul 15 11:20:19.312000 audit[4544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4534 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.312000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236333363323135396363386462333763646164636533363031343035 Jul 15 11:20:19.313000 audit: BPF prog-id=212 op=UNLOAD Jul 15 11:20:19.313000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { perfmon } for pid=4544 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit[4544]: AVC avc: denied { bpf } for pid=4544 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:19.313000 audit: BPF prog-id=213 op=LOAD Jul 15 11:20:19.313000 audit[4544]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4534 pid=4544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.313000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6236333363323135396363386462333763646164636533363031343035 Jul 15 11:20:19.316239 systemd-resolved[1159]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:20:19.341846 env[1219]: time="2025-07-15T11:20:19.340795145Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-678dcc9b89-w9brg,Uid:0bbb05f0-6922-4873-997d-efb6a051decc,Namespace:calico-system,Attempt:1,} returns sandbox id \"b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979\"" Jul 15 11:20:19.350940 systemd-networkd[1044]: cali4ff98645407: Gained IPv6LL Jul 15 11:20:19.352059 systemd-networkd[1044]: calic1ef52f6d8a: Gained IPv6LL Jul 15 11:20:19.415237 systemd-networkd[1044]: cali7709a8e9967: Gained IPv6LL Jul 15 11:20:19.612048 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2153546000.mount: Deactivated successfully. Jul 15 11:20:19.751000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.109:22-10.0.0.1:60250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:19.752989 systemd[1]: Started sshd@8-10.0.0.109:22-10.0.0.1:60250.service. Jul 15 11:20:19.753921 kernel: kauditd_printk_skb: 731 callbacks suppressed Jul 15 11:20:19.753961 kernel: audit: type=1130 audit(1752578419.751:1401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.109:22-10.0.0.1:60250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:19.804000 audit[4568]: USER_ACCT pid=4568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:19.807132 sshd[4568]: Accepted publickey for core from 10.0.0.1 port 60250 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:19.804000 audit[4568]: CRED_ACQ pid=4568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:19.810547 sshd[4568]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:19.813009 kernel: audit: type=1101 audit(1752578419.804:1402): pid=4568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:19.813143 kernel: audit: type=1103 audit(1752578419.804:1403): pid=4568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:19.813193 kernel: audit: type=1006 audit(1752578419.804:1404): pid=4568 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=9 res=1 Jul 15 11:20:19.815860 kernel: audit: type=1300 audit(1752578419.804:1404): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4475040 a2=3 a3=1 items=0 ppid=1 pid=4568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.804000 audit[4568]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd4475040 a2=3 a3=1 items=0 ppid=1 pid=4568 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:19.804000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:19.819176 kernel: audit: type=1327 audit(1752578419.804:1404): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:19.822082 systemd[1]: Started session-9.scope. Jul 15 11:20:19.823167 systemd-logind[1207]: New session 9 of user core. Jul 15 11:20:19.823000 audit[4327]: AVC avc: denied { watch } for pid=4327 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_20_02.4284549996/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c635,c680 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c635,c680 tclass=file permissive=0 Jul 15 11:20:19.823000 audit[4327]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000cb71a0 a2=fc6 a3=0 items=0 ppid=4227 pid=4327 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c635,c680 key=(null) Jul 15 11:20:19.832566 kernel: audit: type=1400 audit(1752578419.823:1405): avc: denied { watch } for pid=4327 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_20_02.4284549996/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c635,c680 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c635,c680 tclass=file permissive=0 Jul 15 11:20:19.832659 kernel: audit: type=1300 audit(1752578419.823:1405): arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=4000cb71a0 a2=fc6 a3=0 items=0 ppid=4227 pid=4327 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c635,c680 key=(null) Jul 15 11:20:19.832685 kernel: audit: type=1327 audit(1752578419.823:1405): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:20:19.823000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:20:19.827000 audit[4568]: USER_START pid=4568 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:19.839782 kernel: audit: type=1105 audit(1752578419.827:1406): pid=4568 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:19.827000 audit[4570]: CRED_ACQ pid=4570 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:20.070448 kubelet[1951]: E0715 11:20:20.070194 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:20.070448 kubelet[1951]: E0715 11:20:20.070344 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:20.147498 sshd[4568]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:20.146000 audit[4568]: USER_END pid=4568 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:20.146000 audit[4568]: CRED_DISP pid=4568 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:20.148000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.109:22-10.0.0.1:60250 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:20.150618 systemd[1]: sshd@8-10.0.0.109:22-10.0.0.1:60250.service: Deactivated successfully. Jul 15 11:20:20.151416 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:20:20.152797 systemd-logind[1207]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:20:20.153554 systemd-logind[1207]: Removed session 9. Jul 15 11:20:20.226405 env[1219]: time="2025-07-15T11:20:20.226355308Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:20.228911 env[1219]: time="2025-07-15T11:20:20.228871843Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:20.227000 audit[4582]: NETFILTER_CFG table=filter:121 family=2 entries=11 op=nft_register_rule pid=4582 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:20.227000 audit[4582]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff5bec1d0 a2=0 a3=1 items=0 ppid=2062 pid=4582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.227000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:20.230587 env[1219]: time="2025-07-15T11:20:20.230555666Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:20.232125 env[1219]: time="2025-07-15T11:20:20.232086851Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:20.232844 env[1219]: time="2025-07-15T11:20:20.232787444Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 15 11:20:20.236272 env[1219]: time="2025-07-15T11:20:20.236233570Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:20:20.237795 env[1219]: time="2025-07-15T11:20:20.237757034Z" level=info msg="CreateContainer within sandbox \"8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:20:20.236000 audit[4582]: NETFILTER_CFG table=nat:122 family=2 entries=29 op=nft_register_chain pid=4582 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:20.236000 audit[4582]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff5bec1d0 a2=0 a3=1 items=0 ppid=2062 pid=4582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.236000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:20.251991 env[1219]: time="2025-07-15T11:20:20.251938974Z" level=info msg="CreateContainer within sandbox \"8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"3d5b7dec03df509d81d506dfec89fd51c367031677473f6720099c1d4b79c278\"" Jul 15 11:20:20.252680 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount677057685.mount: Deactivated successfully. Jul 15 11:20:20.253593 env[1219]: time="2025-07-15T11:20:20.253563758Z" level=info msg="StartContainer for \"3d5b7dec03df509d81d506dfec89fd51c367031677473f6720099c1d4b79c278\"" Jul 15 11:20:20.268215 systemd[1]: Started cri-containerd-3d5b7dec03df509d81d506dfec89fd51c367031677473f6720099c1d4b79c278.scope. Jul 15 11:20:20.273608 systemd[1]: run-containerd-runc-k8s.io-3d5b7dec03df509d81d506dfec89fd51c367031677473f6720099c1d4b79c278-runc.E0YT5q.mount: Deactivated successfully. Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit: BPF prog-id=214 op=LOAD Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4113 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364356237646563303364663530396438316435303664666563383966 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4113 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364356237646563303364663530396438316435303664666563383966 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit: BPF prog-id=215 op=LOAD Jul 15 11:20:20.291000 audit[4590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4113 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364356237646563303364663530396438316435303664666563383966 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.291000 audit: BPF prog-id=216 op=LOAD Jul 15 11:20:20.291000 audit[4590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4113 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.291000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364356237646563303364663530396438316435303664666563383966 Jul 15 11:20:20.292000 audit: BPF prog-id=216 op=UNLOAD Jul 15 11:20:20.292000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { perfmon } for pid=4590 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit[4590]: AVC avc: denied { bpf } for pid=4590 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:20.292000 audit: BPF prog-id=217 op=LOAD Jul 15 11:20:20.292000 audit[4590]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4113 pid=4590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:20.292000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364356237646563303364663530396438316435303664666563383966 Jul 15 11:20:20.365310 env[1219]: time="2025-07-15T11:20:20.365156611Z" level=info msg="StartContainer for \"3d5b7dec03df509d81d506dfec89fd51c367031677473f6720099c1d4b79c278\" returns successfully" Jul 15 11:20:20.568353 systemd-networkd[1044]: cali4c3f8412f9d: Gained IPv6LL Jul 15 11:20:21.084200 kubelet[1951]: I0715 11:20:21.084144 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-wdnmw" podStartSLOduration=23.518203379 podStartE2EDuration="26.084129264s" podCreationTimestamp="2025-07-15 11:19:55 +0000 UTC" firstStartedPulling="2025-07-15 11:20:17.667908788 +0000 UTC m=+38.876917764" lastFinishedPulling="2025-07-15 11:20:20.233834673 +0000 UTC m=+41.442843649" observedRunningTime="2025-07-15 11:20:21.083705708 +0000 UTC m=+42.292714804" watchObservedRunningTime="2025-07-15 11:20:21.084129264 +0000 UTC m=+42.293138240" Jul 15 11:20:21.094000 audit[4620]: NETFILTER_CFG table=filter:123 family=2 entries=10 op=nft_register_rule pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:21.094000 audit[4620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdc712ee0 a2=0 a3=1 items=0 ppid=2062 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:21.094000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:21.103000 audit[4620]: NETFILTER_CFG table=nat:124 family=2 entries=24 op=nft_register_rule pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:21.103000 audit[4620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffdc712ee0 a2=0 a3=1 items=0 ppid=2062 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:21.103000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:21.521030 env[1219]: time="2025-07-15T11:20:21.520980643Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:21.522755 env[1219]: time="2025-07-15T11:20:21.522715187Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:21.524242 env[1219]: time="2025-07-15T11:20:21.524215332Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:21.525526 env[1219]: time="2025-07-15T11:20:21.525496080Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:21.525939 env[1219]: time="2025-07-15T11:20:21.525912036Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 15 11:20:21.527534 env[1219]: time="2025-07-15T11:20:21.527509620Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:20:21.529744 env[1219]: time="2025-07-15T11:20:21.529709359Z" level=info msg="CreateContainer within sandbox \"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:20:21.541229 env[1219]: time="2025-07-15T11:20:21.541130689Z" level=info msg="CreateContainer within sandbox \"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"ef8c98df6fa2c6b02f1915692738087665264323c614bce4877b6424ca7776fa\"" Jul 15 11:20:21.541558 env[1219]: time="2025-07-15T11:20:21.541528365Z" level=info msg="StartContainer for \"ef8c98df6fa2c6b02f1915692738087665264323c614bce4877b6424ca7776fa\"" Jul 15 11:20:21.561862 systemd[1]: Started cri-containerd-ef8c98df6fa2c6b02f1915692738087665264323c614bce4877b6424ca7776fa.scope. Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4434 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:21.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386339386466366661326336623032663139313536393237333830 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.580000 audit: BPF prog-id=218 op=LOAD Jul 15 11:20:21.580000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4434 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:21.580000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386339386466366661326336623032663139313536393237333830 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit: BPF prog-id=219 op=LOAD Jul 15 11:20:21.581000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4434 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:21.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386339386466366661326336623032663139313536393237333830 Jul 15 11:20:21.581000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:20:21.581000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { perfmon } for pid=4628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit[4628]: AVC avc: denied { bpf } for pid=4628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:21.581000 audit: BPF prog-id=220 op=LOAD Jul 15 11:20:21.581000 audit[4628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4434 pid=4628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:21.581000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6566386339386466366661326336623032663139313536393237333830 Jul 15 11:20:21.599640 env[1219]: time="2025-07-15T11:20:21.599585604Z" level=info msg="StartContainer for \"ef8c98df6fa2c6b02f1915692738087665264323c614bce4877b6424ca7776fa\" returns successfully" Jul 15 11:20:22.076923 kubelet[1951]: I0715 11:20:22.076893 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:20:22.914132 systemd[1]: run-containerd-runc-k8s.io-3d5b7dec03df509d81d506dfec89fd51c367031677473f6720099c1d4b79c278-runc.WDUqdZ.mount: Deactivated successfully. Jul 15 11:20:24.064313 env[1219]: time="2025-07-15T11:20:24.064252369Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:24.065863 env[1219]: time="2025-07-15T11:20:24.065797475Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:24.067089 env[1219]: time="2025-07-15T11:20:24.067060464Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:24.068453 env[1219]: time="2025-07-15T11:20:24.068428212Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:24.068972 env[1219]: time="2025-07-15T11:20:24.068942887Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 15 11:20:24.070122 env[1219]: time="2025-07-15T11:20:24.070095237Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:20:24.084331 env[1219]: time="2025-07-15T11:20:24.084293629Z" level=info msg="CreateContainer within sandbox \"b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:20:24.096037 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2482971021.mount: Deactivated successfully. Jul 15 11:20:24.096489 env[1219]: time="2025-07-15T11:20:24.096443640Z" level=info msg="CreateContainer within sandbox \"b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"45ca5806956782fdc9a1913c56976732803e3140a882feb33fdbf1bfa57ae63d\"" Jul 15 11:20:24.098690 env[1219]: time="2025-07-15T11:20:24.098641260Z" level=info msg="StartContainer for \"45ca5806956782fdc9a1913c56976732803e3140a882feb33fdbf1bfa57ae63d\"" Jul 15 11:20:24.113974 systemd[1]: Started cri-containerd-45ca5806956782fdc9a1913c56976732803e3140a882feb33fdbf1bfa57ae63d.scope. Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.138000 audit: BPF prog-id=221 op=LOAD Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4534 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:24.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435636135383036393536373832666463396131393133633536393736 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4534 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:24.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435636135383036393536373832666463396131393133633536393736 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit: BPF prog-id=222 op=LOAD Jul 15 11:20:24.139000 audit[4735]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4534 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:24.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435636135383036393536373832666463396131393133633536393736 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit: BPF prog-id=223 op=LOAD Jul 15 11:20:24.139000 audit[4735]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4534 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:24.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435636135383036393536373832666463396131393133633536393736 Jul 15 11:20:24.139000 audit: BPF prog-id=223 op=UNLOAD Jul 15 11:20:24.139000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { perfmon } for pid=4735 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit[4735]: AVC avc: denied { bpf } for pid=4735 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:24.139000 audit: BPF prog-id=224 op=LOAD Jul 15 11:20:24.139000 audit[4735]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4534 pid=4735 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:24.139000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435636135383036393536373832666463396131393133633536393736 Jul 15 11:20:24.158968 env[1219]: time="2025-07-15T11:20:24.158919998Z" level=info msg="StartContainer for \"45ca5806956782fdc9a1913c56976732803e3140a882feb33fdbf1bfa57ae63d\" returns successfully" Jul 15 11:20:25.104324 kubelet[1951]: I0715 11:20:25.103456 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-678dcc9b89-w9brg" podStartSLOduration=24.375565457 podStartE2EDuration="29.103437962s" podCreationTimestamp="2025-07-15 11:19:56 +0000 UTC" firstStartedPulling="2025-07-15 11:20:19.341946134 +0000 UTC m=+40.550955070" lastFinishedPulling="2025-07-15 11:20:24.069818599 +0000 UTC m=+45.278827575" observedRunningTime="2025-07-15 11:20:25.098774643 +0000 UTC m=+46.307783619" watchObservedRunningTime="2025-07-15 11:20:25.103437962 +0000 UTC m=+46.312446938" Jul 15 11:20:25.152340 systemd[1]: Started sshd@9-10.0.0.109:22-10.0.0.1:39962.service. Jul 15 11:20:25.156571 kernel: kauditd_printk_skb: 173 callbacks suppressed Jul 15 11:20:25.156638 kernel: audit: type=1130 audit(1752578425.150:1457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.109:22-10.0.0.1:39962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.150000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.109:22-10.0.0.1:39962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.196685 sshd[4798]: Accepted publickey for core from 10.0.0.1 port 39962 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:25.194000 audit[4798]: USER_ACCT pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.200848 kernel: audit: type=1101 audit(1752578425.194:1458): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.199000 audit[4798]: CRED_ACQ pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.201866 sshd[4798]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:25.205429 systemd-logind[1207]: New session 10 of user core. Jul 15 11:20:25.207462 kernel: audit: type=1103 audit(1752578425.199:1459): pid=4798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.207535 kernel: audit: type=1006 audit(1752578425.199:1460): pid=4798 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 15 11:20:25.207570 kernel: audit: type=1300 audit(1752578425.199:1460): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffead37480 a2=3 a3=1 items=0 ppid=1 pid=4798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.199000 audit[4798]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffead37480 a2=3 a3=1 items=0 ppid=1 pid=4798 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.206427 systemd[1]: Started session-10.scope. Jul 15 11:20:25.199000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:25.211277 kernel: audit: type=1327 audit(1752578425.199:1460): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:25.211000 audit[4798]: USER_START pid=4798 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.212000 audit[4800]: CRED_ACQ pid=4800 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.219470 kernel: audit: type=1105 audit(1752578425.211:1461): pid=4798 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.219900 kernel: audit: type=1103 audit(1752578425.212:1462): pid=4800 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.397555 sshd[4798]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:25.396000 audit[4798]: USER_END pid=4798 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.401446 systemd[1]: Started sshd@10-10.0.0.109:22-10.0.0.1:39970.service. Jul 15 11:20:25.400000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.109:22-10.0.0.1:39970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.406228 kernel: audit: type=1106 audit(1752578425.396:1463): pid=4798 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.406416 kernel: audit: type=1130 audit(1752578425.400:1464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.109:22-10.0.0.1:39970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.403000 audit[4798]: CRED_DISP pid=4798 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.406511 systemd[1]: sshd@9-10.0.0.109:22-10.0.0.1:39962.service: Deactivated successfully. Jul 15 11:20:25.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.109:22-10.0.0.1:39962 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.407376 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:20:25.407956 systemd-logind[1207]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:20:25.408652 systemd-logind[1207]: Removed session 10. Jul 15 11:20:25.424595 env[1219]: time="2025-07-15T11:20:25.424547017Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:25.426191 env[1219]: time="2025-07-15T11:20:25.426150923Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:25.427854 env[1219]: time="2025-07-15T11:20:25.427807068Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:25.430349 env[1219]: time="2025-07-15T11:20:25.430309366Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:20:25.431436 env[1219]: time="2025-07-15T11:20:25.431396757Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 15 11:20:25.434514 env[1219]: time="2025-07-15T11:20:25.434477810Z" level=info msg="CreateContainer within sandbox \"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:20:25.449798 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount421955926.mount: Deactivated successfully. Jul 15 11:20:25.452453 env[1219]: time="2025-07-15T11:20:25.452411532Z" level=info msg="CreateContainer within sandbox \"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"3ecbce91328a3676e9fa7db6ebdb153b3c5e3c6b6a333235cb8d54a6e40cf2f0\"" Jul 15 11:20:25.456396 env[1219]: time="2025-07-15T11:20:25.456363697Z" level=info msg="StartContainer for \"3ecbce91328a3676e9fa7db6ebdb153b3c5e3c6b6a333235cb8d54a6e40cf2f0\"" Jul 15 11:20:25.454000 audit[4811]: USER_ACCT pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.456690 sshd[4811]: Accepted publickey for core from 10.0.0.1 port 39970 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:25.456000 audit[4811]: CRED_ACQ pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.456000 audit[4811]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd2e279f0 a2=3 a3=1 items=0 ppid=1 pid=4811 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:25.458343 sshd[4811]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:25.468141 systemd-logind[1207]: New session 11 of user core. Jul 15 11:20:25.469051 systemd[1]: Started session-11.scope. Jul 15 11:20:25.476000 audit[4811]: USER_START pid=4811 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.478000 audit[4828]: CRED_ACQ pid=4828 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.489396 systemd[1]: Started cri-containerd-3ecbce91328a3676e9fa7db6ebdb153b3c5e3c6b6a333235cb8d54a6e40cf2f0.scope. Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4434 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365636263653931333238613336373665396661376462366562646231 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.503000 audit: BPF prog-id=225 op=LOAD Jul 15 11:20:25.503000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4434 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.503000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365636263653931333238613336373665396661376462366562646231 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit: BPF prog-id=226 op=LOAD Jul 15 11:20:25.504000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4434 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365636263653931333238613336373665396661376462366562646231 Jul 15 11:20:25.504000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:20:25.504000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { perfmon } for pid=4822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit[4822]: AVC avc: denied { bpf } for pid=4822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:20:25.504000 audit: BPF prog-id=227 op=LOAD Jul 15 11:20:25.504000 audit[4822]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4434 pid=4822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.504000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365636263653931333238613336373665396661376462366562646231 Jul 15 11:20:25.519318 env[1219]: time="2025-07-15T11:20:25.519265304Z" level=info msg="StartContainer for \"3ecbce91328a3676e9fa7db6ebdb153b3c5e3c6b6a333235cb8d54a6e40cf2f0\" returns successfully" Jul 15 11:20:25.657112 sshd[4811]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:25.661790 systemd[1]: Started sshd@11-10.0.0.109:22-10.0.0.1:39976.service. Jul 15 11:20:25.660000 audit[4811]: USER_END pid=4811 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.660000 audit[4811]: CRED_DISP pid=4811 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.661000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.109:22-10.0.0.1:39976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.668167 systemd[1]: sshd@10-10.0.0.109:22-10.0.0.1:39970.service: Deactivated successfully. Jul 15 11:20:25.666000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.109:22-10.0.0.1:39970 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.668982 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:20:25.669588 systemd-logind[1207]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:20:25.670640 systemd-logind[1207]: Removed session 11. Jul 15 11:20:25.704000 audit[4862]: USER_ACCT pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.706468 sshd[4862]: Accepted publickey for core from 10.0.0.1 port 39976 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:25.705000 audit[4862]: CRED_ACQ pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.705000 audit[4862]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffcc4b3e40 a2=3 a3=1 items=0 ppid=1 pid=4862 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:25.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:25.707748 sshd[4862]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:25.711451 systemd-logind[1207]: New session 12 of user core. Jul 15 11:20:25.712296 systemd[1]: Started session-12.scope. Jul 15 11:20:25.714000 audit[4862]: USER_START pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.716000 audit[4865]: CRED_ACQ pid=4865 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.847442 sshd[4862]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:25.846000 audit[4862]: USER_END pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.846000 audit[4862]: CRED_DISP pid=4862 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:25.850583 systemd[1]: sshd@11-10.0.0.109:22-10.0.0.1:39976.service: Deactivated successfully. Jul 15 11:20:25.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.109:22-10.0.0.1:39976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:25.851363 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:20:25.851915 systemd-logind[1207]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:20:25.852598 systemd-logind[1207]: Removed session 12. Jul 15 11:20:25.949576 kubelet[1951]: I0715 11:20:25.949323 1951 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:20:25.949576 kubelet[1951]: I0715 11:20:25.949364 1951 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:20:30.852001 systemd[1]: Started sshd@12-10.0.0.109:22-10.0.0.1:39982.service. Jul 15 11:20:30.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.109:22-10.0.0.1:39982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:30.853181 kernel: kauditd_printk_skb: 66 callbacks suppressed Jul 15 11:20:30.853228 kernel: audit: type=1130 audit(1752578430.850:1490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.109:22-10.0.0.1:39982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:30.886000 audit[4886]: USER_ACCT pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.888743 sshd[4886]: Accepted publickey for core from 10.0.0.1 port 39982 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:30.889980 sshd[4886]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:30.887000 audit[4886]: CRED_ACQ pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.893243 systemd-logind[1207]: New session 13 of user core. Jul 15 11:20:30.894141 systemd[1]: Started session-13.scope. Jul 15 11:20:30.894782 kernel: audit: type=1101 audit(1752578430.886:1491): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.894858 kernel: audit: type=1103 audit(1752578430.887:1492): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.897663 kernel: audit: type=1006 audit(1752578430.887:1493): pid=4886 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 15 11:20:30.887000 audit[4886]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd35607c0 a2=3 a3=1 items=0 ppid=1 pid=4886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:30.901776 kernel: audit: type=1300 audit(1752578430.887:1493): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd35607c0 a2=3 a3=1 items=0 ppid=1 pid=4886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:30.901852 kernel: audit: type=1327 audit(1752578430.887:1493): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:30.887000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:30.896000 audit[4886]: USER_START pid=4886 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.906466 kernel: audit: type=1105 audit(1752578430.896:1494): pid=4886 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.897000 audit[4888]: CRED_ACQ pid=4888 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:30.909981 kernel: audit: type=1103 audit(1752578430.897:1495): pid=4888 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:31.046342 sshd[4886]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:31.045000 audit[4886]: USER_END pid=4886 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:31.049091 systemd[1]: sshd@12-10.0.0.109:22-10.0.0.1:39982.service: Deactivated successfully. Jul 15 11:20:31.050005 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:20:31.045000 audit[4886]: CRED_DISP pid=4886 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:31.051181 systemd-logind[1207]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:20:31.052791 systemd-logind[1207]: Removed session 13. Jul 15 11:20:31.054232 kernel: audit: type=1106 audit(1752578431.045:1496): pid=4886 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:31.054299 kernel: audit: type=1104 audit(1752578431.045:1497): pid=4886 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:31.047000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.109:22-10.0.0.1:39982 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:31.253428 kubelet[1951]: I0715 11:20:31.253036 1951 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:20:31.273852 kubelet[1951]: I0715 11:20:31.273410 1951 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-456pj" podStartSLOduration=28.144995771 podStartE2EDuration="35.273395494s" podCreationTimestamp="2025-07-15 11:19:56 +0000 UTC" firstStartedPulling="2025-07-15 11:20:18.303776147 +0000 UTC m=+39.512785123" lastFinishedPulling="2025-07-15 11:20:25.43217591 +0000 UTC m=+46.641184846" observedRunningTime="2025-07-15 11:20:26.105696202 +0000 UTC m=+47.314705138" watchObservedRunningTime="2025-07-15 11:20:31.273395494 +0000 UTC m=+52.482404470" Jul 15 11:20:31.288000 audit[4899]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=4899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:31.288000 audit[4899]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffdc19d8b0 a2=0 a3=1 items=0 ppid=2062 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:31.288000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:31.300000 audit[4899]: NETFILTER_CFG table=nat:126 family=2 entries=36 op=nft_register_chain pid=4899 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:31.300000 audit[4899]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffdc19d8b0 a2=0 a3=1 items=0 ppid=2062 pid=4899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:31.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:36.051495 systemd[1]: Started sshd@13-10.0.0.109:22-10.0.0.1:50306.service. Jul 15 11:20:36.050000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.109:22-10.0.0.1:50306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:36.055190 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:20:36.055255 kernel: audit: type=1130 audit(1752578436.050:1501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.109:22-10.0.0.1:50306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:36.090000 audit[4907]: USER_ACCT pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.091852 sshd[4907]: Accepted publickey for core from 10.0.0.1 port 50306 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:36.093343 sshd[4907]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:36.092000 audit[4907]: CRED_ACQ pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.097888 kernel: audit: type=1101 audit(1752578436.090:1502): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.097955 kernel: audit: type=1103 audit(1752578436.092:1503): pid=4907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.099829 kernel: audit: type=1006 audit(1752578436.092:1504): pid=4907 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 15 11:20:36.092000 audit[4907]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff267f5b0 a2=3 a3=1 items=0 ppid=1 pid=4907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:36.103096 kernel: audit: type=1300 audit(1752578436.092:1504): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff267f5b0 a2=3 a3=1 items=0 ppid=1 pid=4907 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:36.092000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:36.105126 kernel: audit: type=1327 audit(1752578436.092:1504): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:36.105298 systemd-logind[1207]: New session 14 of user core. Jul 15 11:20:36.106095 systemd[1]: Started session-14.scope. Jul 15 11:20:36.108000 audit[4907]: USER_START pid=4907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.113000 audit[4909]: CRED_ACQ pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.117155 kernel: audit: type=1105 audit(1752578436.108:1505): pid=4907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.117214 kernel: audit: type=1103 audit(1752578436.113:1506): pid=4909 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.178000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.178000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.187450 kernel: audit: type=1400 audit(1752578436.178:1508): avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.187513 kernel: audit: type=1400 audit(1752578436.178:1507): avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520966 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.178000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=80 a1=4006af8b40 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:20:36.178000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400eba9c20 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:20:36.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:20:36.178000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:20:36.180000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.180000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=400892c8e0 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:20:36.180000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:20:36.181000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.181000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=81 a1=4006af8c60 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:20:36.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:20:36.181000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.181000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=401250b7a0 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:20:36.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:20:36.181000 audit[1840]: AVC avc: denied { watch } for pid=1840 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:36.181000 audit[1840]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=82 a1=400779c740 a2=fc6 a3=0 items=0 ppid=1667 pid=1840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c620,c720 key=(null) Jul 15 11:20:36.181000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313039002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:20:36.287430 sshd[4907]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:36.287000 audit[4907]: USER_END pid=4907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.287000 audit[4907]: CRED_DISP pid=4907 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:36.289761 systemd[1]: sshd@13-10.0.0.109:22-10.0.0.1:50306.service: Deactivated successfully. Jul 15 11:20:36.289000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.109:22-10.0.0.1:50306 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:36.290552 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:20:36.291032 systemd-logind[1207]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:20:36.291708 systemd-logind[1207]: Removed session 14. Jul 15 11:20:37.464000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520970 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:37.464000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:37.464000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4000a16680 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:20:37.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:20:37.464000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=4000ea5cb0 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:20:37.464000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:20:38.868858 env[1219]: time="2025-07-15T11:20:38.868761903Z" level=info msg="StopPodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\"" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.924 [WARNING][4929] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"0aa73792-5e92-42aa-b561-b947928db919", ResourceVersion:"1063", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742", Pod:"calico-apiserver-65795b46b6-7xgn9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic1ef52f6d8a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.925 [INFO][4929] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.925 [INFO][4929] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" iface="eth0" netns="" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.926 [INFO][4929] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.926 [INFO][4929] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.946 [INFO][4940] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.946 [INFO][4940] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.946 [INFO][4940] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.955 [WARNING][4940] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.955 [INFO][4940] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.956 [INFO][4940] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:38.960396 env[1219]: 2025-07-15 11:20:38.958 [INFO][4929] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:38.960953 env[1219]: time="2025-07-15T11:20:38.960420849Z" level=info msg="TearDown network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" successfully" Jul 15 11:20:38.960953 env[1219]: time="2025-07-15T11:20:38.960450248Z" level=info msg="StopPodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" returns successfully" Jul 15 11:20:38.961016 env[1219]: time="2025-07-15T11:20:38.960956005Z" level=info msg="RemovePodSandbox for \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\"" Jul 15 11:20:38.961016 env[1219]: time="2025-07-15T11:20:38.960992164Z" level=info msg="Forcibly stopping sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\"" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:38.992 [WARNING][4958] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"0aa73792-5e92-42aa-b561-b947928db919", ResourceVersion:"1063", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"027490f3a243312cd814dd5c0635db382d7751b67462fe4585e1522dfa5d6742", Pod:"calico-apiserver-65795b46b6-7xgn9", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calic1ef52f6d8a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:38.992 [INFO][4958] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:38.992 [INFO][4958] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" iface="eth0" netns="" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:38.992 [INFO][4958] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:38.992 [INFO][4958] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.010 [INFO][4966] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.011 [INFO][4966] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.011 [INFO][4966] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.023 [WARNING][4966] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.023 [INFO][4966] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" HandleID="k8s-pod-network.2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Workload="localhost-k8s-calico--apiserver--65795b46b6--7xgn9-eth0" Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.025 [INFO][4966] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.028332 env[1219]: 2025-07-15 11:20:39.026 [INFO][4958] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82" Jul 15 11:20:39.028893 env[1219]: time="2025-07-15T11:20:39.028358046Z" level=info msg="TearDown network for sandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" successfully" Jul 15 11:20:39.037107 env[1219]: time="2025-07-15T11:20:39.037060944Z" level=info msg="RemovePodSandbox \"2864a03cf3ef14deec750292fddd61138736c22ab55d699d869c5fcdf8904a82\" returns successfully" Jul 15 11:20:39.037620 env[1219]: time="2025-07-15T11:20:39.037597021Z" level=info msg="StopPodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\"" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.068 [WARNING][4985] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3406aa9f-b094-4101-a7eb-585fe64d1723", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb", Pod:"coredns-7c65d6cfc9-mn59l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid515b47982a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.068 [INFO][4985] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.069 [INFO][4985] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" iface="eth0" netns="" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.069 [INFO][4985] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.069 [INFO][4985] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.099 [INFO][4994] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.099 [INFO][4994] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.099 [INFO][4994] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.107 [WARNING][4994] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.107 [INFO][4994] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.108 [INFO][4994] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.111915 env[1219]: 2025-07-15 11:20:39.110 [INFO][4985] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.112389 env[1219]: time="2025-07-15T11:20:39.111940816Z" level=info msg="TearDown network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" successfully" Jul 15 11:20:39.112389 env[1219]: time="2025-07-15T11:20:39.111971136Z" level=info msg="StopPodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" returns successfully" Jul 15 11:20:39.112496 env[1219]: time="2025-07-15T11:20:39.112452972Z" level=info msg="RemovePodSandbox for \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\"" Jul 15 11:20:39.112542 env[1219]: time="2025-07-15T11:20:39.112506532Z" level=info msg="Forcibly stopping sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\"" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.145 [WARNING][5011] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3406aa9f-b094-4101-a7eb-585fe64d1723", ResourceVersion:"1018", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d15b820beb24345d7f5d1cf52fcd66ca1748b3f83019a66173cbe751671d71eb", Pod:"coredns-7c65d6cfc9-mn59l", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calid515b47982a", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.145 [INFO][5011] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.145 [INFO][5011] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" iface="eth0" netns="" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.145 [INFO][5011] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.145 [INFO][5011] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.164 [INFO][5020] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.164 [INFO][5020] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.164 [INFO][5020] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.172 [WARNING][5020] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.172 [INFO][5020] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" HandleID="k8s-pod-network.8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Workload="localhost-k8s-coredns--7c65d6cfc9--mn59l-eth0" Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.174 [INFO][5020] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.178822 env[1219]: 2025-07-15 11:20:39.175 [INFO][5011] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81" Jul 15 11:20:39.178822 env[1219]: time="2025-07-15T11:20:39.177861831Z" level=info msg="TearDown network for sandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" successfully" Jul 15 11:20:39.181903 env[1219]: time="2025-07-15T11:20:39.181856883Z" level=info msg="RemovePodSandbox \"8697c30c9c0c0e11abea6b058d53f4bd739ea13bd54276b413f5f3344d04ba81\" returns successfully" Jul 15 11:20:39.182435 env[1219]: time="2025-07-15T11:20:39.182407879Z" level=info msg="StopPodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\"" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.214 [WARNING][5037] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0", GenerateName:"calico-kube-controllers-678dcc9b89-", Namespace:"calico-system", SelfLink:"", UID:"0bbb05f0-6922-4873-997d-efb6a051decc", ResourceVersion:"1119", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"678dcc9b89", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979", Pod:"calico-kube-controllers-678dcc9b89-w9brg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c3f8412f9d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.215 [INFO][5037] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.215 [INFO][5037] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" iface="eth0" netns="" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.215 [INFO][5037] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.215 [INFO][5037] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.232 [INFO][5046] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.232 [INFO][5046] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.233 [INFO][5046] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.242 [WARNING][5046] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.242 [INFO][5046] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.244 [INFO][5046] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.247331 env[1219]: 2025-07-15 11:20:39.245 [INFO][5037] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.247761 env[1219]: time="2025-07-15T11:20:39.247360820Z" level=info msg="TearDown network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" successfully" Jul 15 11:20:39.247761 env[1219]: time="2025-07-15T11:20:39.247397500Z" level=info msg="StopPodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" returns successfully" Jul 15 11:20:39.247822 env[1219]: time="2025-07-15T11:20:39.247788377Z" level=info msg="RemovePodSandbox for \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\"" Jul 15 11:20:39.247885 env[1219]: time="2025-07-15T11:20:39.247837817Z" level=info msg="Forcibly stopping sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\"" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.280 [WARNING][5064] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0", GenerateName:"calico-kube-controllers-678dcc9b89-", Namespace:"calico-system", SelfLink:"", UID:"0bbb05f0-6922-4873-997d-efb6a051decc", ResourceVersion:"1119", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"678dcc9b89", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b633c2159cc8db37cdadce36014051c80161ee045cc0a3bfcd3bd726e09e0979", Pod:"calico-kube-controllers-678dcc9b89-w9brg", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali4c3f8412f9d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.280 [INFO][5064] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.280 [INFO][5064] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" iface="eth0" netns="" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.280 [INFO][5064] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.280 [INFO][5064] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.297 [INFO][5073] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.297 [INFO][5073] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.298 [INFO][5073] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.307 [WARNING][5073] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.307 [INFO][5073] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" HandleID="k8s-pod-network.44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Workload="localhost-k8s-calico--kube--controllers--678dcc9b89--w9brg-eth0" Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.308 [INFO][5073] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.312033 env[1219]: 2025-07-15 11:20:39.310 [INFO][5064] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846" Jul 15 11:20:39.312778 env[1219]: time="2025-07-15T11:20:39.312059244Z" level=info msg="TearDown network for sandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" successfully" Jul 15 11:20:39.314838 env[1219]: time="2025-07-15T11:20:39.314759705Z" level=info msg="RemovePodSandbox \"44291a614d1b4a095ea3f85c60d41b750a58d60ba718e7beefb7322ddb071846\" returns successfully" Jul 15 11:20:39.315289 env[1219]: time="2025-07-15T11:20:39.315228061Z" level=info msg="StopPodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\"" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.347 [WARNING][5093] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--456pj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96ed7aff-ca57-4e30-a201-f756b40d3f77", ResourceVersion:"1145", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c", Pod:"csi-node-driver-456pj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ff98645407", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.347 [INFO][5093] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.347 [INFO][5093] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" iface="eth0" netns="" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.347 [INFO][5093] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.347 [INFO][5093] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.364 [INFO][5102] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.364 [INFO][5102] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.364 [INFO][5102] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.372 [WARNING][5102] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.372 [INFO][5102] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.374 [INFO][5102] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.377617 env[1219]: 2025-07-15 11:20:39.376 [INFO][5093] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.378152 env[1219]: time="2025-07-15T11:20:39.378116178Z" level=info msg="TearDown network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" successfully" Jul 15 11:20:39.378219 env[1219]: time="2025-07-15T11:20:39.378203777Z" level=info msg="StopPodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" returns successfully" Jul 15 11:20:39.378737 env[1219]: time="2025-07-15T11:20:39.378695733Z" level=info msg="RemovePodSandbox for \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\"" Jul 15 11:20:39.378799 env[1219]: time="2025-07-15T11:20:39.378733933Z" level=info msg="Forcibly stopping sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\"" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.411 [WARNING][5120] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--456pj-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"96ed7aff-ca57-4e30-a201-f756b40d3f77", ResourceVersion:"1145", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 56, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a18b2d45f37b0f2212074b9b8cfc587b35b5dc565353f3d4b5803cea487eab5c", Pod:"csi-node-driver-456pj", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali4ff98645407", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.411 [INFO][5120] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.411 [INFO][5120] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" iface="eth0" netns="" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.411 [INFO][5120] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.411 [INFO][5120] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.428 [INFO][5129] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.428 [INFO][5129] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.428 [INFO][5129] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.438 [WARNING][5129] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.438 [INFO][5129] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" HandleID="k8s-pod-network.08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Workload="localhost-k8s-csi--node--driver--456pj-eth0" Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.439 [INFO][5129] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.444590 env[1219]: 2025-07-15 11:20:39.441 [INFO][5120] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f" Jul 15 11:20:39.444590 env[1219]: time="2025-07-15T11:20:39.443405757Z" level=info msg="TearDown network for sandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" successfully" Jul 15 11:20:39.446336 env[1219]: time="2025-07-15T11:20:39.446298336Z" level=info msg="RemovePodSandbox \"08675a53a3ce9b655bceda82286427edd1e5bd0fc37360b9351f95b4c386632f\" returns successfully" Jul 15 11:20:39.446772 env[1219]: time="2025-07-15T11:20:39.446747693Z" level=info msg="StopPodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\"" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.479 [WARNING][5147] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"e99c048a-b44e-4e49-b8a2-60d71754b9a4", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082", Pod:"calico-apiserver-65795b46b6-75csc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3e1099d7e9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.479 [INFO][5147] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.479 [INFO][5147] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" iface="eth0" netns="" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.479 [INFO][5147] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.479 [INFO][5147] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.496 [INFO][5156] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.496 [INFO][5156] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.496 [INFO][5156] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.505 [WARNING][5156] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.505 [INFO][5156] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.510 [INFO][5156] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.514082 env[1219]: 2025-07-15 11:20:39.512 [INFO][5147] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.514491 env[1219]: time="2025-07-15T11:20:39.514105978Z" level=info msg="TearDown network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" successfully" Jul 15 11:20:39.514491 env[1219]: time="2025-07-15T11:20:39.514133938Z" level=info msg="StopPodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" returns successfully" Jul 15 11:20:39.514993 env[1219]: time="2025-07-15T11:20:39.514951172Z" level=info msg="RemovePodSandbox for \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\"" Jul 15 11:20:39.515063 env[1219]: time="2025-07-15T11:20:39.514986612Z" level=info msg="Forcibly stopping sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\"" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.547 [WARNING][5174] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0", GenerateName:"calico-apiserver-65795b46b6-", Namespace:"calico-apiserver", SelfLink:"", UID:"e99c048a-b44e-4e49-b8a2-60d71754b9a4", ResourceVersion:"1174", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 52, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"65795b46b6", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3e15e916cb3742477b0619c4a8eafad447d29074f4860c9c38dae6a25f552082", Pod:"calico-apiserver-65795b46b6-75csc", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid3e1099d7e9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.547 [INFO][5174] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.547 [INFO][5174] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" iface="eth0" netns="" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.547 [INFO][5174] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.547 [INFO][5174] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.565 [INFO][5183] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.565 [INFO][5183] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.565 [INFO][5183] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.573 [WARNING][5183] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.573 [INFO][5183] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" HandleID="k8s-pod-network.91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Workload="localhost-k8s-calico--apiserver--65795b46b6--75csc-eth0" Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.575 [INFO][5183] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.578791 env[1219]: 2025-07-15 11:20:39.577 [INFO][5174] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d" Jul 15 11:20:39.579219 env[1219]: time="2025-07-15T11:20:39.578834961Z" level=info msg="TearDown network for sandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" successfully" Jul 15 11:20:39.581727 env[1219]: time="2025-07-15T11:20:39.581695901Z" level=info msg="RemovePodSandbox \"91abbe6a64de8e3149a8d5d63c462f30cf663eead7dddf682ae8c8df1280267d\" returns successfully" Jul 15 11:20:39.582278 env[1219]: time="2025-07-15T11:20:39.582254657Z" level=info msg="StopPodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\"" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.614 [WARNING][5200] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"10b9f436-677d-447b-8404-d1b1a0388753", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88", Pod:"coredns-7c65d6cfc9-cpqd8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13f53518321", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.614 [INFO][5200] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.614 [INFO][5200] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" iface="eth0" netns="" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.614 [INFO][5200] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.614 [INFO][5200] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.631 [INFO][5209] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.632 [INFO][5209] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.632 [INFO][5209] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.642 [WARNING][5209] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.642 [INFO][5209] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.644 [INFO][5209] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.647299 env[1219]: 2025-07-15 11:20:39.645 [INFO][5200] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.647764 env[1219]: time="2025-07-15T11:20:39.647345637Z" level=info msg="TearDown network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" successfully" Jul 15 11:20:39.647764 env[1219]: time="2025-07-15T11:20:39.647384557Z" level=info msg="StopPodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" returns successfully" Jul 15 11:20:39.648063 env[1219]: time="2025-07-15T11:20:39.648020793Z" level=info msg="RemovePodSandbox for \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\"" Jul 15 11:20:39.648195 env[1219]: time="2025-07-15T11:20:39.648155032Z" level=info msg="Forcibly stopping sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\"" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.685 [WARNING][5227] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"10b9f436-677d-447b-8404-d1b1a0388753", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0b1e68d2b1a92217ab81d07fa85795f92bd11747e51d8e3aa4fe2e3087fb2b88", Pod:"coredns-7c65d6cfc9-cpqd8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali13f53518321", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.685 [INFO][5227] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.685 [INFO][5227] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" iface="eth0" netns="" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.685 [INFO][5227] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.685 [INFO][5227] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.703 [INFO][5235] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.703 [INFO][5235] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.703 [INFO][5235] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.712 [WARNING][5235] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.713 [INFO][5235] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" HandleID="k8s-pod-network.bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Workload="localhost-k8s-coredns--7c65d6cfc9--cpqd8-eth0" Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.714 [INFO][5235] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.718882 env[1219]: 2025-07-15 11:20:39.716 [INFO][5227] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63" Jul 15 11:20:39.719388 env[1219]: time="2025-07-15T11:20:39.719351289Z" level=info msg="TearDown network for sandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" successfully" Jul 15 11:20:39.722396 env[1219]: time="2025-07-15T11:20:39.722362548Z" level=info msg="RemovePodSandbox \"bec54bda6b253599872f81d8f6f9292f7bb8d88dbf3ff1fc64f1ce84c891ae63\" returns successfully" Jul 15 11:20:39.723095 env[1219]: time="2025-07-15T11:20:39.723065463Z" level=info msg="StopPodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\"" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.753 [WARNING][5253] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" WorkloadEndpoint="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.753 [INFO][5253] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.753 [INFO][5253] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" iface="eth0" netns="" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.753 [INFO][5253] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.754 [INFO][5253] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.771 [INFO][5261] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.772 [INFO][5261] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.772 [INFO][5261] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.780 [WARNING][5261] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.780 [INFO][5261] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.782 [INFO][5261] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.785999 env[1219]: 2025-07-15 11:20:39.784 [INFO][5253] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.786431 env[1219]: time="2025-07-15T11:20:39.786032259Z" level=info msg="TearDown network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" successfully" Jul 15 11:20:39.786431 env[1219]: time="2025-07-15T11:20:39.786073498Z" level=info msg="StopPodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" returns successfully" Jul 15 11:20:39.786625 env[1219]: time="2025-07-15T11:20:39.786596615Z" level=info msg="RemovePodSandbox for \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\"" Jul 15 11:20:39.786678 env[1219]: time="2025-07-15T11:20:39.786635694Z" level=info msg="Forcibly stopping sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\"" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.819 [WARNING][5279] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" WorkloadEndpoint="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.819 [INFO][5279] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.819 [INFO][5279] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" iface="eth0" netns="" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.819 [INFO][5279] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.819 [INFO][5279] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.838 [INFO][5288] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.838 [INFO][5288] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.838 [INFO][5288] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.846 [WARNING][5288] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.846 [INFO][5288] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" HandleID="k8s-pod-network.13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Workload="localhost-k8s-whisker--864b5bb44f--lwgnt-eth0" Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.848 [INFO][5288] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.851787 env[1219]: 2025-07-15 11:20:39.850 [INFO][5279] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc" Jul 15 11:20:39.852168 env[1219]: time="2025-07-15T11:20:39.851825354Z" level=info msg="TearDown network for sandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" successfully" Jul 15 11:20:39.854717 env[1219]: time="2025-07-15T11:20:39.854684574Z" level=info msg="RemovePodSandbox \"13b336a1f9b09e4a1f0446744ce90497fbaa7ffe822d4d4720c6f82649c4a4dc\" returns successfully" Jul 15 11:20:39.855197 env[1219]: time="2025-07-15T11:20:39.855167371Z" level=info msg="StopPodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\"" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.885 [WARNING][5306] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"21108302-e040-4ff9-9142-3ed8f4d8bfc8", ResourceVersion:"1082", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc", Pod:"goldmane-58fd7646b9-wdnmw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali7709a8e9967", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.885 [INFO][5306] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.885 [INFO][5306] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" iface="eth0" netns="" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.885 [INFO][5306] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.885 [INFO][5306] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.905 [INFO][5315] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.906 [INFO][5315] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.906 [INFO][5315] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.920 [WARNING][5315] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.920 [INFO][5315] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.921 [INFO][5315] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.925887 env[1219]: 2025-07-15 11:20:39.923 [INFO][5306] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.926464 env[1219]: time="2025-07-15T11:20:39.925911032Z" level=info msg="TearDown network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" successfully" Jul 15 11:20:39.926464 env[1219]: time="2025-07-15T11:20:39.925942351Z" level=info msg="StopPodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" returns successfully" Jul 15 11:20:39.926464 env[1219]: time="2025-07-15T11:20:39.926353828Z" level=info msg="RemovePodSandbox for \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\"" Jul 15 11:20:39.926464 env[1219]: time="2025-07-15T11:20:39.926385628Z" level=info msg="Forcibly stopping sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\"" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.957 [WARNING][5333] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"21108302-e040-4ff9-9142-3ed8f4d8bfc8", ResourceVersion:"1082", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 19, 55, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8c44f0819c28a58cfba23c1fed74a69a18cc439809bd8555faaa3aebcb4d25fc", Pod:"goldmane-58fd7646b9-wdnmw", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali7709a8e9967", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.958 [INFO][5333] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.958 [INFO][5333] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" iface="eth0" netns="" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.958 [INFO][5333] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.958 [INFO][5333] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.974 [INFO][5342] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.975 [INFO][5342] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.975 [INFO][5342] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.983 [WARNING][5342] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.983 [INFO][5342] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" HandleID="k8s-pod-network.e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Workload="localhost-k8s-goldmane--58fd7646b9--wdnmw-eth0" Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.985 [INFO][5342] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:20:39.988259 env[1219]: 2025-07-15 11:20:39.986 [INFO][5333] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5" Jul 15 11:20:39.988722 env[1219]: time="2025-07-15T11:20:39.988285871Z" level=info msg="TearDown network for sandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" successfully" Jul 15 11:20:39.991090 env[1219]: time="2025-07-15T11:20:39.991044812Z" level=info msg="RemovePodSandbox \"e2bf6f3e6d656241ac936ab1f84a9cdabd1e3863890ebc23d04e6d27a27b9cf5\" returns successfully" Jul 15 11:20:40.350132 systemd[1]: run-containerd-runc-k8s.io-45ca5806956782fdc9a1913c56976732803e3140a882feb33fdbf1bfa57ae63d-runc.b518Wh.mount: Deactivated successfully. Jul 15 11:20:41.291719 systemd[1]: Started sshd@14-10.0.0.109:22-10.0.0.1:50318.service. Jul 15 11:20:41.291000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.109:22-10.0.0.1:50318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:41.292841 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 15 11:20:41.292913 kernel: audit: type=1130 audit(1752578441.291:1518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.109:22-10.0.0.1:50318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:41.333000 audit[5371]: USER_ACCT pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.334448 sshd[5371]: Accepted publickey for core from 10.0.0.1 port 50318 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:41.335989 sshd[5371]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:41.334000 audit[5371]: CRED_ACQ pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.340435 kernel: audit: type=1101 audit(1752578441.333:1519): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.340485 kernel: audit: type=1103 audit(1752578441.334:1520): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.340510 kernel: audit: type=1006 audit(1752578441.334:1521): pid=5371 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:20:41.334000 audit[5371]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe56274b0 a2=3 a3=1 items=0 ppid=1 pid=5371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:41.344046 systemd-logind[1207]: New session 15 of user core. Jul 15 11:20:41.344475 systemd[1]: Started session-15.scope. Jul 15 11:20:41.345480 kernel: audit: type=1300 audit(1752578441.334:1521): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe56274b0 a2=3 a3=1 items=0 ppid=1 pid=5371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:41.334000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:41.346584 kernel: audit: type=1327 audit(1752578441.334:1521): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:41.347000 audit[5371]: USER_START pid=5371 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.348000 audit[5373]: CRED_ACQ pid=5373 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.354603 kernel: audit: type=1105 audit(1752578441.347:1522): pid=5371 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.354657 kernel: audit: type=1103 audit(1752578441.348:1523): pid=5373 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.534932 sshd[5371]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:41.536000 audit[5371]: USER_END pid=5371 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.539721 systemd[1]: Started sshd@15-10.0.0.109:22-10.0.0.1:50320.service. Jul 15 11:20:41.540275 systemd[1]: sshd@14-10.0.0.109:22-10.0.0.1:50318.service: Deactivated successfully. Jul 15 11:20:41.536000 audit[5371]: CRED_DISP pid=5371 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.541199 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:20:41.541890 systemd-logind[1207]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:20:41.542965 systemd-logind[1207]: Removed session 15. Jul 15 11:20:41.543343 kernel: audit: type=1106 audit(1752578441.536:1524): pid=5371 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.543392 kernel: audit: type=1104 audit(1752578441.536:1525): pid=5371 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.109:22-10.0.0.1:50320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:41.539000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.109:22-10.0.0.1:50318 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:41.555000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:41.555000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:41.555000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=40003fb860 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:20:41.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:20:41.555000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4002e07d60 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:20:41.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:20:41.555000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:41.555000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000a166a0 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:20:41.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:20:41.555000 audit[1798]: AVC avc: denied { watch } for pid=1798 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520964 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:20:41.555000 audit[1798]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=40003fb880 a2=fc6 a3=0 items=0 ppid=1668 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c599,c704 key=(null) Jul 15 11:20:41.555000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:20:41.578000 audit[5384]: USER_ACCT pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.579191 sshd[5384]: Accepted publickey for core from 10.0.0.1 port 50320 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:41.579000 audit[5384]: CRED_ACQ pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.579000 audit[5384]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc3704140 a2=3 a3=1 items=0 ppid=1 pid=5384 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:41.579000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:41.580723 sshd[5384]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:41.584954 systemd[1]: Started session-16.scope. Jul 15 11:20:41.585874 systemd-logind[1207]: New session 16 of user core. Jul 15 11:20:41.588000 audit[5384]: USER_START pid=5384 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.589000 audit[5387]: CRED_ACQ pid=5387 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.790442 sshd[5384]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:41.790000 audit[5384]: USER_END pid=5384 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.791000 audit[5384]: CRED_DISP pid=5384 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.794956 systemd[1]: Started sshd@16-10.0.0.109:22-10.0.0.1:50326.service. Jul 15 11:20:41.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.109:22-10.0.0.1:50326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:41.796245 systemd[1]: sshd@15-10.0.0.109:22-10.0.0.1:50320.service: Deactivated successfully. Jul 15 11:20:41.796438 systemd-logind[1207]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:20:41.795000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.109:22-10.0.0.1:50320 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:41.796963 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:20:41.799124 systemd-logind[1207]: Removed session 16. Jul 15 11:20:41.832000 audit[5396]: USER_ACCT pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.833358 sshd[5396]: Accepted publickey for core from 10.0.0.1 port 50326 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:41.833000 audit[5396]: CRED_ACQ pid=5396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.833000 audit[5396]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc8d0ba30 a2=3 a3=1 items=0 ppid=1 pid=5396 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:41.833000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:41.834969 sshd[5396]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:41.838169 systemd-logind[1207]: New session 17 of user core. Jul 15 11:20:41.839033 systemd[1]: Started session-17.scope. Jul 15 11:20:41.841000 audit[5396]: USER_START pid=5396 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:41.842000 audit[5399]: CRED_ACQ pid=5399 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:43.477023 systemd[1]: run-containerd-runc-k8s.io-b1b3e2246529ea3a25e38953aca45caca68a8405a5047f50b6792dfda911af57-runc.SSjrKW.mount: Deactivated successfully. Jul 15 11:20:43.566000 audit[5432]: NETFILTER_CFG table=filter:127 family=2 entries=22 op=nft_register_rule pid=5432 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:43.566000 audit[5432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe5c1e3a0 a2=0 a3=1 items=0 ppid=2062 pid=5432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:43.566000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:43.573977 sshd[5396]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:43.574000 audit[5396]: USER_END pid=5396 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:43.574000 audit[5396]: CRED_DISP pid=5396 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:43.575000 audit[5432]: NETFILTER_CFG table=nat:128 family=2 entries=24 op=nft_register_rule pid=5432 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:43.575000 audit[5432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe5c1e3a0 a2=0 a3=1 items=0 ppid=2062 pid=5432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:43.575000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:43.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.109:22-10.0.0.1:37352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:43.578146 systemd[1]: Started sshd@17-10.0.0.109:22-10.0.0.1:37352.service. Jul 15 11:20:43.580115 systemd[1]: sshd@16-10.0.0.109:22-10.0.0.1:50326.service: Deactivated successfully. Jul 15 11:20:43.579000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.109:22-10.0.0.1:50326 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:43.581466 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:20:43.582328 systemd-logind[1207]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:20:43.583229 systemd-logind[1207]: Removed session 17. Jul 15 11:20:43.594000 audit[5438]: NETFILTER_CFG table=filter:129 family=2 entries=34 op=nft_register_rule pid=5438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:43.594000 audit[5438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffd37b7730 a2=0 a3=1 items=0 ppid=2062 pid=5438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:43.594000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:43.599000 audit[5438]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=5438 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:43.599000 audit[5438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffd37b7730 a2=0 a3=1 items=0 ppid=2062 pid=5438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:43.599000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:43.617000 audit[5434]: USER_ACCT pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:43.618255 sshd[5434]: Accepted publickey for core from 10.0.0.1 port 37352 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:43.618000 audit[5434]: CRED_ACQ pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:43.618000 audit[5434]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc559d0f0 a2=3 a3=1 items=0 ppid=1 pid=5434 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:43.618000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:43.619535 sshd[5434]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:43.623953 systemd-logind[1207]: New session 18 of user core. Jul 15 11:20:43.623979 systemd[1]: Started session-18.scope. Jul 15 11:20:43.627000 audit[5434]: USER_START pid=5434 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:43.628000 audit[5439]: CRED_ACQ pid=5439 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.148299 sshd[5434]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:44.149000 audit[5434]: USER_END pid=5434 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.149000 audit[5434]: CRED_DISP pid=5434 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.152685 systemd[1]: Started sshd@18-10.0.0.109:22-10.0.0.1:37364.service. Jul 15 11:20:44.151000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.109:22-10.0.0.1:37364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:44.153179 systemd[1]: sshd@17-10.0.0.109:22-10.0.0.1:37352.service: Deactivated successfully. Jul 15 11:20:44.152000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.109:22-10.0.0.1:37352 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:44.153904 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:20:44.157895 systemd-logind[1207]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:20:44.159303 systemd-logind[1207]: Removed session 18. Jul 15 11:20:44.186000 audit[5449]: USER_ACCT pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.187946 sshd[5449]: Accepted publickey for core from 10.0.0.1 port 37364 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:44.188000 audit[5449]: CRED_ACQ pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.188000 audit[5449]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffca6da970 a2=3 a3=1 items=0 ppid=1 pid=5449 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:44.188000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:44.189336 sshd[5449]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:44.192625 systemd-logind[1207]: New session 19 of user core. Jul 15 11:20:44.193243 systemd[1]: Started session-19.scope. Jul 15 11:20:44.195000 audit[5449]: USER_START pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.196000 audit[5452]: CRED_ACQ pid=5452 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.306940 sshd[5449]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:44.306000 audit[5449]: USER_END pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.307000 audit[5449]: CRED_DISP pid=5449 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:44.309253 systemd[1]: sshd@18-10.0.0.109:22-10.0.0.1:37364.service: Deactivated successfully. Jul 15 11:20:44.308000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.109:22-10.0.0.1:37364 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:44.310015 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:20:44.310474 systemd-logind[1207]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:20:44.311204 systemd-logind[1207]: Removed session 19. Jul 15 11:20:45.881126 kubelet[1951]: E0715 11:20:45.881090 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:47.880959 kubelet[1951]: E0715 11:20:47.880922 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:48.224000 audit[5466]: NETFILTER_CFG table=filter:131 family=2 entries=22 op=nft_register_rule pid=5466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:48.226460 kernel: kauditd_printk_skb: 69 callbacks suppressed Jul 15 11:20:48.226539 kernel: audit: type=1325 audit(1752578448.224:1571): table=filter:131 family=2 entries=22 op=nft_register_rule pid=5466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:48.224000 audit[5466]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffce1fea70 a2=0 a3=1 items=0 ppid=2062 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:48.232077 kernel: audit: type=1300 audit(1752578448.224:1571): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffce1fea70 a2=0 a3=1 items=0 ppid=2062 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:48.232132 kernel: audit: type=1327 audit(1752578448.224:1571): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:48.224000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:48.239000 audit[5466]: NETFILTER_CFG table=nat:132 family=2 entries=108 op=nft_register_chain pid=5466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:48.239000 audit[5466]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=ffffce1fea70 a2=0 a3=1 items=0 ppid=2062 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:48.246321 kernel: audit: type=1325 audit(1752578448.239:1572): table=nat:132 family=2 entries=108 op=nft_register_chain pid=5466 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:48.246364 kernel: audit: type=1300 audit(1752578448.239:1572): arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=ffffce1fea70 a2=0 a3=1 items=0 ppid=2062 pid=5466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:48.246381 kernel: audit: type=1327 audit(1752578448.239:1572): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:48.239000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:49.311946 systemd[1]: Started sshd@19-10.0.0.109:22-10.0.0.1:37374.service. Jul 15 11:20:49.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.109:22-10.0.0.1:37374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:49.315844 kernel: audit: type=1130 audit(1752578449.311:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.109:22-10.0.0.1:37374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:49.346000 audit[5470]: USER_ACCT pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.347322 sshd[5470]: Accepted publickey for core from 10.0.0.1 port 37374 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:49.348926 sshd[5470]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:49.347000 audit[5470]: CRED_ACQ pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.353114 kernel: audit: type=1101 audit(1752578449.346:1574): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.353191 kernel: audit: type=1103 audit(1752578449.347:1575): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.353219 kernel: audit: type=1006 audit(1752578449.347:1576): pid=5470 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 15 11:20:49.347000 audit[5470]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd5354060 a2=3 a3=1 items=0 ppid=1 pid=5470 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:49.347000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:49.357385 systemd-logind[1207]: New session 20 of user core. Jul 15 11:20:49.357635 systemd[1]: Started session-20.scope. Jul 15 11:20:49.360000 audit[5470]: USER_START pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.361000 audit[5472]: CRED_ACQ pid=5472 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.474498 sshd[5470]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:49.474000 audit[5470]: USER_END pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.474000 audit[5470]: CRED_DISP pid=5470 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:49.477271 systemd[1]: sshd@19-10.0.0.109:22-10.0.0.1:37374.service: Deactivated successfully. Jul 15 11:20:49.476000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.109:22-10.0.0.1:37374 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:49.478072 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:20:49.478533 systemd-logind[1207]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:20:49.479331 systemd-logind[1207]: Removed session 20. Jul 15 11:20:52.872000 audit[5510]: NETFILTER_CFG table=filter:133 family=2 entries=9 op=nft_register_rule pid=5510 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:52.872000 audit[5510]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffc73f1440 a2=0 a3=1 items=0 ppid=2062 pid=5510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:52.872000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:52.883000 audit[5510]: NETFILTER_CFG table=nat:134 family=2 entries=55 op=nft_register_chain pid=5510 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:20:52.883000 audit[5510]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=ffffc73f1440 a2=0 a3=1 items=0 ppid=2062 pid=5510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:52.883000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:20:53.881632 kubelet[1951]: E0715 11:20:53.881597 1951 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:20:54.479804 systemd[1]: Started sshd@20-10.0.0.109:22-10.0.0.1:57012.service. Jul 15 11:20:54.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.109:22-10.0.0.1:57012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:54.481057 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 15 11:20:54.481126 kernel: audit: type=1130 audit(1752578454.478:1584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.109:22-10.0.0.1:57012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:54.517000 audit[5512]: USER_ACCT pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.519804 sshd[5512]: Accepted publickey for core from 10.0.0.1 port 57012 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:54.521562 sshd[5512]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:54.519000 audit[5512]: CRED_ACQ pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.525612 kernel: audit: type=1101 audit(1752578454.517:1585): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.525663 kernel: audit: type=1103 audit(1752578454.519:1586): pid=5512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.519000 audit[5512]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff45e960 a2=3 a3=1 items=0 ppid=1 pid=5512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:54.530431 systemd[1]: Started session-21.scope. Jul 15 11:20:54.530588 systemd-logind[1207]: New session 21 of user core. Jul 15 11:20:54.531075 kernel: audit: type=1006 audit(1752578454.519:1587): pid=5512 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 15 11:20:54.531123 kernel: audit: type=1300 audit(1752578454.519:1587): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffff45e960 a2=3 a3=1 items=0 ppid=1 pid=5512 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:54.519000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:54.532275 kernel: audit: type=1327 audit(1752578454.519:1587): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:54.532000 audit[5512]: USER_START pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.536000 audit[5514]: CRED_ACQ pid=5514 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.541792 kernel: audit: type=1105 audit(1752578454.532:1588): pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.541884 kernel: audit: type=1103 audit(1752578454.536:1589): pid=5514 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.670191 sshd[5512]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:54.670000 audit[5512]: USER_END pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.675245 systemd[1]: sshd@20-10.0.0.109:22-10.0.0.1:57012.service: Deactivated successfully. Jul 15 11:20:54.676154 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:20:54.670000 audit[5512]: CRED_DISP pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.677324 systemd-logind[1207]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:20:54.679569 kernel: audit: type=1106 audit(1752578454.670:1590): pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.679652 kernel: audit: type=1104 audit(1752578454.670:1591): pid=5512 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:54.679585 systemd-logind[1207]: Removed session 21. Jul 15 11:20:54.673000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.109:22-10.0.0.1:57012 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:59.674511 systemd[1]: Started sshd@21-10.0.0.109:22-10.0.0.1:57022.service. Jul 15 11:20:59.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.109:22-10.0.0.1:57022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:59.675571 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:20:59.675751 kernel: audit: type=1130 audit(1752578459.672:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.109:22-10.0.0.1:57022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:20:59.715000 audit[5528]: USER_ACCT pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.717598 sshd[5528]: Accepted publickey for core from 10.0.0.1 port 57022 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:20:59.719388 sshd[5528]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:20:59.717000 audit[5528]: CRED_ACQ pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.724009 kernel: audit: type=1101 audit(1752578459.715:1594): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.724081 kernel: audit: type=1103 audit(1752578459.717:1595): pid=5528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.724111 kernel: audit: type=1006 audit(1752578459.717:1596): pid=5528 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 15 11:20:59.717000 audit[5528]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9ad3b90 a2=3 a3=1 items=0 ppid=1 pid=5528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:59.726407 systemd-logind[1207]: New session 22 of user core. Jul 15 11:20:59.726891 systemd[1]: Started session-22.scope. Jul 15 11:20:59.728976 kernel: audit: type=1300 audit(1752578459.717:1596): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe9ad3b90 a2=3 a3=1 items=0 ppid=1 pid=5528 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:20:59.717000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:59.730220 kernel: audit: type=1327 audit(1752578459.717:1596): proctitle=737368643A20636F7265205B707269765D Jul 15 11:20:59.729000 audit[5528]: USER_START pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.730000 audit[5530]: CRED_ACQ pid=5530 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.738391 kernel: audit: type=1105 audit(1752578459.729:1597): pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.738490 kernel: audit: type=1103 audit(1752578459.730:1598): pid=5530 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.872789 sshd[5528]: pam_unix(sshd:session): session closed for user core Jul 15 11:20:59.871000 audit[5528]: USER_END pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.875697 systemd-logind[1207]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:20:59.875892 systemd[1]: sshd@21-10.0.0.109:22-10.0.0.1:57022.service: Deactivated successfully. Jul 15 11:20:59.876830 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:20:59.877875 systemd-logind[1207]: Removed session 22. Jul 15 11:20:59.872000 audit[5528]: CRED_DISP pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.881207 kernel: audit: type=1106 audit(1752578459.871:1599): pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.881256 kernel: audit: type=1104 audit(1752578459.872:1600): pid=5528 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:20:59.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.109:22-10.0.0.1:57022 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:21:04.877752 systemd[1]: Started sshd@22-10.0.0.109:22-10.0.0.1:48062.service. Jul 15 11:21:04.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.109:22-10.0.0.1:48062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:21:04.879042 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:21:04.879090 kernel: audit: type=1130 audit(1752578464.876:1602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.109:22-10.0.0.1:48062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:21:04.917000 audit[5562]: USER_ACCT pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.919300 sshd[5562]: Accepted publickey for core from 10.0.0.1 port 48062 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:21:04.922831 kernel: audit: type=1101 audit(1752578464.917:1603): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.921000 audit[5562]: CRED_ACQ pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.923974 sshd[5562]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:21:04.928736 kernel: audit: type=1103 audit(1752578464.921:1604): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.928818 kernel: audit: type=1006 audit(1752578464.921:1605): pid=5562 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:21:04.921000 audit[5562]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5655e90 a2=3 a3=1 items=0 ppid=1 pid=5562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:21:04.932195 kernel: audit: type=1300 audit(1752578464.921:1605): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe5655e90 a2=3 a3=1 items=0 ppid=1 pid=5562 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:21:04.921000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:21:04.933434 kernel: audit: type=1327 audit(1752578464.921:1605): proctitle=737368643A20636F7265205B707269765D Jul 15 11:21:04.935640 systemd-logind[1207]: New session 23 of user core. Jul 15 11:21:04.936162 systemd[1]: Started session-23.scope. Jul 15 11:21:04.938000 audit[5562]: USER_START pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.942000 audit[5564]: CRED_ACQ pid=5564 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.946980 kernel: audit: type=1105 audit(1752578464.938:1606): pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:04.947043 kernel: audit: type=1103 audit(1752578464.942:1607): pid=5564 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:05.055147 sshd[5562]: pam_unix(sshd:session): session closed for user core Jul 15 11:21:05.054000 audit[5562]: USER_END pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:05.060062 systemd[1]: sshd@22-10.0.0.109:22-10.0.0.1:48062.service: Deactivated successfully. Jul 15 11:21:05.054000 audit[5562]: CRED_DISP pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:05.061041 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:21:05.061602 systemd-logind[1207]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:21:05.062386 systemd-logind[1207]: Removed session 23. Jul 15 11:21:05.063176 kernel: audit: type=1106 audit(1752578465.054:1608): pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:05.063227 kernel: audit: type=1104 audit(1752578465.054:1609): pid=5562 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:21:05.058000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.109:22-10.0.0.1:48062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'