Jul 15 11:25:12.735430 kernel: Booting Linux on physical CPU 0x0000000000 [0x413fd0c1] Jul 15 11:25:12.735451 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (aarch64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP PREEMPT Tue Jul 15 10:06:30 -00 2025 Jul 15 11:25:12.735460 kernel: efi: EFI v2.70 by EDK II Jul 15 11:25:12.735465 kernel: efi: SMBIOS 3.0=0xd9260000 ACPI 2.0=0xd9240000 MEMATTR=0xda32b018 RNG=0xd9220018 MEMRESERVE=0xd9521c18 Jul 15 11:25:12.735470 kernel: random: crng init done Jul 15 11:25:12.735476 kernel: ACPI: Early table checksum verification disabled Jul 15 11:25:12.735483 kernel: ACPI: RSDP 0x00000000D9240000 000024 (v02 BOCHS ) Jul 15 11:25:12.735489 kernel: ACPI: XSDT 0x00000000D9230000 000064 (v01 BOCHS BXPC 00000001 01000013) Jul 15 11:25:12.735495 kernel: ACPI: FACP 0x00000000D91E0000 000114 (v06 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735500 kernel: ACPI: DSDT 0x00000000D91F0000 0014A2 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735506 kernel: ACPI: APIC 0x00000000D91D0000 0001A8 (v04 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735511 kernel: ACPI: PPTT 0x00000000D91C0000 00009C (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735516 kernel: ACPI: GTDT 0x00000000D91B0000 000060 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735522 kernel: ACPI: MCFG 0x00000000D91A0000 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735529 kernel: ACPI: SPCR 0x00000000D9190000 000050 (v02 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735535 kernel: ACPI: DBG2 0x00000000D9180000 000057 (v00 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735541 kernel: ACPI: IORT 0x00000000D9170000 000080 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 15 11:25:12.735547 kernel: ACPI: SPCR: console: pl011,mmio,0x9000000,9600 Jul 15 11:25:12.735552 kernel: NUMA: Failed to initialise from firmware Jul 15 11:25:12.735558 kernel: NUMA: Faking a node at [mem 0x0000000040000000-0x00000000dcffffff] Jul 15 11:25:12.735564 kernel: NUMA: NODE_DATA [mem 0xdcb0b900-0xdcb10fff] Jul 15 11:25:12.735569 kernel: Zone ranges: Jul 15 11:25:12.735575 kernel: DMA [mem 0x0000000040000000-0x00000000dcffffff] Jul 15 11:25:12.735582 kernel: DMA32 empty Jul 15 11:25:12.735588 kernel: Normal empty Jul 15 11:25:12.735593 kernel: Movable zone start for each node Jul 15 11:25:12.735599 kernel: Early memory node ranges Jul 15 11:25:12.735604 kernel: node 0: [mem 0x0000000040000000-0x00000000d924ffff] Jul 15 11:25:12.735610 kernel: node 0: [mem 0x00000000d9250000-0x00000000d951ffff] Jul 15 11:25:12.735615 kernel: node 0: [mem 0x00000000d9520000-0x00000000dc7fffff] Jul 15 11:25:12.735621 kernel: node 0: [mem 0x00000000dc800000-0x00000000dc88ffff] Jul 15 11:25:12.735627 kernel: node 0: [mem 0x00000000dc890000-0x00000000dc89ffff] Jul 15 11:25:12.735632 kernel: node 0: [mem 0x00000000dc8a0000-0x00000000dc9bffff] Jul 15 11:25:12.735638 kernel: node 0: [mem 0x00000000dc9c0000-0x00000000dcffffff] Jul 15 11:25:12.735643 kernel: Initmem setup node 0 [mem 0x0000000040000000-0x00000000dcffffff] Jul 15 11:25:12.735650 kernel: On node 0, zone DMA: 12288 pages in unavailable ranges Jul 15 11:25:12.735656 kernel: psci: probing for conduit method from ACPI. Jul 15 11:25:12.735661 kernel: psci: PSCIv1.1 detected in firmware. Jul 15 11:25:12.735667 kernel: psci: Using standard PSCI v0.2 function IDs Jul 15 11:25:12.735673 kernel: psci: Trusted OS migration not required Jul 15 11:25:12.735681 kernel: psci: SMC Calling Convention v1.1 Jul 15 11:25:12.735687 kernel: smccc: KVM: hypervisor services detected (0x00000000 0x00000000 0x00000000 0x00000003) Jul 15 11:25:12.735707 kernel: ACPI: SRAT not present Jul 15 11:25:12.735714 kernel: percpu: Embedded 30 pages/cpu s82968 r8192 d31720 u122880 Jul 15 11:25:12.735721 kernel: pcpu-alloc: s82968 r8192 d31720 u122880 alloc=30*4096 Jul 15 11:25:12.735727 kernel: pcpu-alloc: [0] 0 [0] 1 [0] 2 [0] 3 Jul 15 11:25:12.735733 kernel: Detected PIPT I-cache on CPU0 Jul 15 11:25:12.735739 kernel: CPU features: detected: GIC system register CPU interface Jul 15 11:25:12.735745 kernel: CPU features: detected: Hardware dirty bit management Jul 15 11:25:12.735751 kernel: CPU features: detected: Spectre-v4 Jul 15 11:25:12.735757 kernel: CPU features: detected: Spectre-BHB Jul 15 11:25:12.735764 kernel: CPU features: kernel page table isolation forced ON by KASLR Jul 15 11:25:12.735771 kernel: CPU features: detected: Kernel page table isolation (KPTI) Jul 15 11:25:12.735777 kernel: CPU features: detected: ARM erratum 1418040 Jul 15 11:25:12.735783 kernel: CPU features: detected: SSBS not fully self-synchronizing Jul 15 11:25:12.735789 kernel: Built 1 zonelists, mobility grouping on. Total pages: 633024 Jul 15 11:25:12.735795 kernel: Policy zone: DMA Jul 15 11:25:12.735802 kernel: Kernel command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=66cb9a8d6ebbbd62ba3e197b019773f14f902d0ee05716ff2fc41a726e431e67 Jul 15 11:25:12.735808 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:25:12.735814 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 15 11:25:12.735820 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:25:12.735826 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:25:12.735834 kernel: Memory: 2457340K/2572288K available (9792K kernel code, 2094K rwdata, 7588K rodata, 36416K init, 777K bss, 114948K reserved, 0K cma-reserved) Jul 15 11:25:12.735840 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 15 11:25:12.735850 kernel: trace event string verifier disabled Jul 15 11:25:12.735856 kernel: rcu: Preemptible hierarchical RCU implementation. Jul 15 11:25:12.735863 kernel: rcu: RCU event tracing is enabled. Jul 15 11:25:12.735869 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 15 11:25:12.735875 kernel: Trampoline variant of Tasks RCU enabled. Jul 15 11:25:12.735881 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:25:12.735887 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:25:12.735893 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 15 11:25:12.735899 kernel: NR_IRQS: 64, nr_irqs: 64, preallocated irqs: 0 Jul 15 11:25:12.735906 kernel: GICv3: 256 SPIs implemented Jul 15 11:25:12.735912 kernel: GICv3: 0 Extended SPIs implemented Jul 15 11:25:12.735918 kernel: GICv3: Distributor has no Range Selector support Jul 15 11:25:12.735924 kernel: Root IRQ handler: gic_handle_irq Jul 15 11:25:12.735930 kernel: GICv3: 16 PPIs implemented Jul 15 11:25:12.735936 kernel: GICv3: CPU0: found redistributor 0 region 0:0x00000000080a0000 Jul 15 11:25:12.735942 kernel: ACPI: SRAT not present Jul 15 11:25:12.735948 kernel: ITS [mem 0x08080000-0x0809ffff] Jul 15 11:25:12.735954 kernel: ITS@0x0000000008080000: allocated 8192 Devices @400b0000 (indirect, esz 8, psz 64K, shr 1) Jul 15 11:25:12.735960 kernel: ITS@0x0000000008080000: allocated 8192 Interrupt Collections @400c0000 (flat, esz 8, psz 64K, shr 1) Jul 15 11:25:12.735966 kernel: GICv3: using LPI property table @0x00000000400d0000 Jul 15 11:25:12.735972 kernel: GICv3: CPU0: using allocated LPI pending table @0x00000000400e0000 Jul 15 11:25:12.735980 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:25:12.735986 kernel: arch_timer: cp15 timer(s) running at 25.00MHz (virt). Jul 15 11:25:12.735992 kernel: clocksource: arch_sys_counter: mask: 0xffffffffffffff max_cycles: 0x5c40939b5, max_idle_ns: 440795202646 ns Jul 15 11:25:12.735998 kernel: sched_clock: 56 bits at 25MHz, resolution 40ns, wraps every 4398046511100ns Jul 15 11:25:12.736004 kernel: arm-pv: using stolen time PV Jul 15 11:25:12.736010 kernel: Console: colour dummy device 80x25 Jul 15 11:25:12.736017 kernel: ACPI: Core revision 20210730 Jul 15 11:25:12.736023 kernel: Calibrating delay loop (skipped), value calculated using timer frequency.. 50.00 BogoMIPS (lpj=25000) Jul 15 11:25:12.736029 kernel: pid_max: default: 32768 minimum: 301 Jul 15 11:25:12.736036 kernel: LSM: Security Framework initializing Jul 15 11:25:12.736043 kernel: SELinux: Initializing. Jul 15 11:25:12.736049 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:25:12.736056 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 15 11:25:12.736062 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:25:12.736068 kernel: Platform MSI: ITS@0x8080000 domain created Jul 15 11:25:12.736074 kernel: PCI/MSI: ITS@0x8080000 domain created Jul 15 11:25:12.736080 kernel: Remapping and enabling EFI services. Jul 15 11:25:12.736087 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:25:12.736093 kernel: Detected PIPT I-cache on CPU1 Jul 15 11:25:12.736100 kernel: GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 Jul 15 11:25:12.736106 kernel: GICv3: CPU1: using allocated LPI pending table @0x00000000400f0000 Jul 15 11:25:12.736113 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:25:12.736119 kernel: CPU1: Booted secondary processor 0x0000000001 [0x413fd0c1] Jul 15 11:25:12.736125 kernel: Detected PIPT I-cache on CPU2 Jul 15 11:25:12.736132 kernel: GICv3: CPU2: found redistributor 2 region 0:0x00000000080e0000 Jul 15 11:25:12.736138 kernel: GICv3: CPU2: using allocated LPI pending table @0x0000000040100000 Jul 15 11:25:12.736144 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:25:12.736150 kernel: CPU2: Booted secondary processor 0x0000000002 [0x413fd0c1] Jul 15 11:25:12.736156 kernel: Detected PIPT I-cache on CPU3 Jul 15 11:25:12.736164 kernel: GICv3: CPU3: found redistributor 3 region 0:0x0000000008100000 Jul 15 11:25:12.736170 kernel: GICv3: CPU3: using allocated LPI pending table @0x0000000040110000 Jul 15 11:25:12.736177 kernel: arch_timer: Enabling local workaround for ARM erratum 1418040 Jul 15 11:25:12.736183 kernel: CPU3: Booted secondary processor 0x0000000003 [0x413fd0c1] Jul 15 11:25:12.736194 kernel: smp: Brought up 1 node, 4 CPUs Jul 15 11:25:12.736201 kernel: SMP: Total of 4 processors activated. Jul 15 11:25:12.736208 kernel: CPU features: detected: 32-bit EL0 Support Jul 15 11:25:12.736214 kernel: CPU features: detected: Data cache clean to the PoU not required for I/D coherence Jul 15 11:25:12.736221 kernel: CPU features: detected: Common not Private translations Jul 15 11:25:12.736227 kernel: CPU features: detected: CRC32 instructions Jul 15 11:25:12.736234 kernel: CPU features: detected: RCpc load-acquire (LDAPR) Jul 15 11:25:12.736240 kernel: CPU features: detected: LSE atomic instructions Jul 15 11:25:12.736248 kernel: CPU features: detected: Privileged Access Never Jul 15 11:25:12.736255 kernel: CPU features: detected: RAS Extension Support Jul 15 11:25:12.736262 kernel: CPU features: detected: Speculative Store Bypassing Safe (SSBS) Jul 15 11:25:12.736268 kernel: CPU: All CPU(s) started at EL1 Jul 15 11:25:12.736275 kernel: alternatives: patching kernel code Jul 15 11:25:12.736282 kernel: devtmpfs: initialized Jul 15 11:25:12.736289 kernel: KASLR enabled Jul 15 11:25:12.736295 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:25:12.736302 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 15 11:25:12.736308 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:25:12.736315 kernel: SMBIOS 3.0.0 present. Jul 15 11:25:12.736321 kernel: DMI: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015 Jul 15 11:25:12.736328 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:25:12.736334 kernel: DMA: preallocated 512 KiB GFP_KERNEL pool for atomic allocations Jul 15 11:25:12.736342 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA pool for atomic allocations Jul 15 11:25:12.736349 kernel: DMA: preallocated 512 KiB GFP_KERNEL|GFP_DMA32 pool for atomic allocations Jul 15 11:25:12.736356 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:25:12.736362 kernel: audit: type=2000 audit(0.032:1): state=initialized audit_enabled=0 res=1 Jul 15 11:25:12.736369 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:25:12.736375 kernel: cpuidle: using governor menu Jul 15 11:25:12.736382 kernel: hw-breakpoint: found 6 breakpoint and 4 watchpoint registers. Jul 15 11:25:12.736388 kernel: ASID allocator initialised with 32768 entries Jul 15 11:25:12.736395 kernel: ACPI: bus type PCI registered Jul 15 11:25:12.736402 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:25:12.736409 kernel: Serial: AMBA PL011 UART driver Jul 15 11:25:12.736416 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:25:12.736422 kernel: HugeTLB registered 32.0 MiB page size, pre-allocated 0 pages Jul 15 11:25:12.736429 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:25:12.736435 kernel: HugeTLB registered 64.0 KiB page size, pre-allocated 0 pages Jul 15 11:25:12.736442 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:25:12.736449 kernel: alg: No test for fips(ansi_cprng) (fips_ansi_cprng) Jul 15 11:25:12.736455 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:25:12.736463 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:25:12.736470 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:25:12.736476 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:25:12.736483 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:25:12.736489 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:25:12.736496 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:25:12.736502 kernel: ACPI: Interpreter enabled Jul 15 11:25:12.736509 kernel: ACPI: Using GIC for interrupt routing Jul 15 11:25:12.736516 kernel: ACPI: MCFG table detected, 1 entries Jul 15 11:25:12.736524 kernel: ARMH0011:00: ttyAMA0 at MMIO 0x9000000 (irq = 12, base_baud = 0) is a SBSA Jul 15 11:25:12.736530 kernel: printk: console [ttyAMA0] enabled Jul 15 11:25:12.736537 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 15 11:25:12.736662 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:25:12.736752 kernel: acpi PNP0A08:00: _OSC: platform does not support [LTR] Jul 15 11:25:12.736813 kernel: acpi PNP0A08:00: _OSC: OS now controls [PCIeHotplug PME AER PCIeCapability] Jul 15 11:25:12.736883 kernel: acpi PNP0A08:00: ECAM area [mem 0x4010000000-0x401fffffff] reserved by PNP0C02:00 Jul 15 11:25:12.736997 kernel: acpi PNP0A08:00: ECAM at [mem 0x4010000000-0x401fffffff] for [bus 00-ff] Jul 15 11:25:12.737007 kernel: ACPI: Remapped I/O 0x000000003eff0000 to [io 0x0000-0xffff window] Jul 15 11:25:12.737014 kernel: PCI host bridge to bus 0000:00 Jul 15 11:25:12.737087 kernel: pci_bus 0000:00: root bus resource [mem 0x10000000-0x3efeffff window] Jul 15 11:25:12.737142 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0xffff window] Jul 15 11:25:12.737195 kernel: pci_bus 0000:00: root bus resource [mem 0x8000000000-0xffffffffff window] Jul 15 11:25:12.737249 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 15 11:25:12.737325 kernel: pci 0000:00:00.0: [1b36:0008] type 00 class 0x060000 Jul 15 11:25:12.737397 kernel: pci 0000:00:01.0: [1af4:1005] type 00 class 0x00ff00 Jul 15 11:25:12.737458 kernel: pci 0000:00:01.0: reg 0x10: [io 0x0000-0x001f] Jul 15 11:25:12.737519 kernel: pci 0000:00:01.0: reg 0x14: [mem 0x10000000-0x10000fff] Jul 15 11:25:12.737578 kernel: pci 0000:00:01.0: reg 0x20: [mem 0x8000000000-0x8000003fff 64bit pref] Jul 15 11:25:12.737637 kernel: pci 0000:00:01.0: BAR 4: assigned [mem 0x8000000000-0x8000003fff 64bit pref] Jul 15 11:25:12.737725 kernel: pci 0000:00:01.0: BAR 1: assigned [mem 0x10000000-0x10000fff] Jul 15 11:25:12.737791 kernel: pci 0000:00:01.0: BAR 0: assigned [io 0x1000-0x101f] Jul 15 11:25:12.737850 kernel: pci_bus 0000:00: resource 4 [mem 0x10000000-0x3efeffff window] Jul 15 11:25:12.737904 kernel: pci_bus 0000:00: resource 5 [io 0x0000-0xffff window] Jul 15 11:25:12.737957 kernel: pci_bus 0000:00: resource 6 [mem 0x8000000000-0xffffffffff window] Jul 15 11:25:12.737966 kernel: ACPI: PCI: Interrupt link GSI0 configured for IRQ 35 Jul 15 11:25:12.737973 kernel: ACPI: PCI: Interrupt link GSI1 configured for IRQ 36 Jul 15 11:25:12.737980 kernel: ACPI: PCI: Interrupt link GSI2 configured for IRQ 37 Jul 15 11:25:12.737988 kernel: ACPI: PCI: Interrupt link GSI3 configured for IRQ 38 Jul 15 11:25:12.737995 kernel: iommu: Default domain type: Translated Jul 15 11:25:12.738002 kernel: iommu: DMA domain TLB invalidation policy: strict mode Jul 15 11:25:12.738008 kernel: vgaarb: loaded Jul 15 11:25:12.738015 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:25:12.738022 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:25:12.738028 kernel: PTP clock support registered Jul 15 11:25:12.738035 kernel: Registered efivars operations Jul 15 11:25:12.738041 kernel: clocksource: Switched to clocksource arch_sys_counter Jul 15 11:25:12.738048 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:25:12.738056 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:25:12.738063 kernel: pnp: PnP ACPI init Jul 15 11:25:12.738126 kernel: system 00:00: [mem 0x4010000000-0x401fffffff window] could not be reserved Jul 15 11:25:12.738136 kernel: pnp: PnP ACPI: found 1 devices Jul 15 11:25:12.738143 kernel: NET: Registered PF_INET protocol family Jul 15 11:25:12.738150 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 15 11:25:12.738156 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 15 11:25:12.738163 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:25:12.738171 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:25:12.738178 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 15 11:25:12.738185 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 15 11:25:12.738191 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:25:12.738198 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 15 11:25:12.738204 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:25:12.738211 kernel: PCI: CLS 0 bytes, default 64 Jul 15 11:25:12.738217 kernel: hw perfevents: enabled with armv8_pmuv3_0 PMU driver, 7 counters available Jul 15 11:25:12.738224 kernel: kvm [1]: HYP mode not available Jul 15 11:25:12.738232 kernel: Initialise system trusted keyrings Jul 15 11:25:12.738238 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 15 11:25:12.738245 kernel: Key type asymmetric registered Jul 15 11:25:12.738251 kernel: Asymmetric key parser 'x509' registered Jul 15 11:25:12.738258 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:25:12.738265 kernel: io scheduler mq-deadline registered Jul 15 11:25:12.738271 kernel: io scheduler kyber registered Jul 15 11:25:12.738278 kernel: io scheduler bfq registered Jul 15 11:25:12.738284 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0C:00/input/input0 Jul 15 11:25:12.738292 kernel: ACPI: button: Power Button [PWRB] Jul 15 11:25:12.738299 kernel: ACPI: \_SB_.PCI0.GSI1: Enabled at IRQ 36 Jul 15 11:25:12.738358 kernel: virtio-pci 0000:00:01.0: enabling device (0005 -> 0007) Jul 15 11:25:12.738367 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:25:12.738373 kernel: thunder_xcv, ver 1.0 Jul 15 11:25:12.738380 kernel: thunder_bgx, ver 1.0 Jul 15 11:25:12.738386 kernel: nicpf, ver 1.0 Jul 15 11:25:12.738393 kernel: nicvf, ver 1.0 Jul 15 11:25:12.738489 kernel: rtc-efi rtc-efi.0: registered as rtc0 Jul 15 11:25:12.738558 kernel: rtc-efi rtc-efi.0: setting system clock to 2025-07-15T11:25:12 UTC (1752578712) Jul 15 11:25:12.738567 kernel: hid: raw HID events driver (C) Jiri Kosina Jul 15 11:25:12.738573 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:25:12.738580 kernel: Segment Routing with IPv6 Jul 15 11:25:12.738587 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:25:12.738594 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:25:12.738600 kernel: Key type dns_resolver registered Jul 15 11:25:12.738606 kernel: registered taskstats version 1 Jul 15 11:25:12.738615 kernel: Loading compiled-in X.509 certificates Jul 15 11:25:12.738622 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: 1835a6fea2ba29f82433ea6fde09cb345fc75fe9' Jul 15 11:25:12.738629 kernel: Key type .fscrypt registered Jul 15 11:25:12.738635 kernel: Key type fscrypt-provisioning registered Jul 15 11:25:12.738642 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:25:12.738649 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:25:12.738655 kernel: ima: No architecture policies found Jul 15 11:25:12.738662 kernel: clk: Disabling unused clocks Jul 15 11:25:12.738668 kernel: Freeing unused kernel memory: 36416K Jul 15 11:25:12.738676 kernel: Run /init as init process Jul 15 11:25:12.738683 kernel: with arguments: Jul 15 11:25:12.738697 kernel: /init Jul 15 11:25:12.738704 kernel: with environment: Jul 15 11:25:12.738710 kernel: HOME=/ Jul 15 11:25:12.738717 kernel: TERM=linux Jul 15 11:25:12.738723 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:25:12.738732 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:25:12.738742 systemd[1]: Detected virtualization kvm. Jul 15 11:25:12.738749 systemd[1]: Detected architecture arm64. Jul 15 11:25:12.738756 systemd[1]: Running in initrd. Jul 15 11:25:12.738763 systemd[1]: No hostname configured, using default hostname. Jul 15 11:25:12.738769 systemd[1]: Hostname set to . Jul 15 11:25:12.738777 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:25:12.738783 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:25:12.738790 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:25:12.738798 systemd[1]: Reached target cryptsetup.target. Jul 15 11:25:12.738805 systemd[1]: Reached target paths.target. Jul 15 11:25:12.738812 systemd[1]: Reached target slices.target. Jul 15 11:25:12.738819 systemd[1]: Reached target swap.target. Jul 15 11:25:12.738826 systemd[1]: Reached target timers.target. Jul 15 11:25:12.738833 systemd[1]: Listening on iscsid.socket. Jul 15 11:25:12.738840 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:25:12.738853 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:25:12.738861 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:25:12.738868 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:25:12.738875 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:25:12.738882 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:25:12.738889 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:25:12.738896 systemd[1]: Reached target sockets.target. Jul 15 11:25:12.738903 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:25:12.738910 systemd[1]: Finished network-cleanup.service. Jul 15 11:25:12.738918 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:25:12.738925 systemd[1]: Starting systemd-journald.service... Jul 15 11:25:12.738932 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:25:12.738939 systemd[1]: Starting systemd-resolved.service... Jul 15 11:25:12.738946 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:25:12.738953 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:25:12.738960 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:25:12.738967 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:25:12.738973 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:25:12.738982 kernel: audit: type=1130 audit(1752578712.734:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.738992 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:25:12.738999 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:25:12.739010 systemd-journald[290]: Journal started Jul 15 11:25:12.739051 systemd-journald[290]: Runtime Journal (/run/log/journal/0ac024c74ac94bffa6b4311e58edb2c7) is 6.0M, max 48.7M, 42.6M free. Jul 15 11:25:12.734000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.728414 systemd-modules-load[291]: Inserted module 'overlay' Jul 15 11:25:12.742316 kernel: audit: type=1130 audit(1752578712.739:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.739000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.742842 systemd[1]: Started systemd-journald.service. Jul 15 11:25:12.742000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.745118 kernel: audit: type=1130 audit(1752578712.742:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.750187 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:25:12.755325 kernel: Bridge firewalling registered Jul 15 11:25:12.754175 systemd-modules-load[291]: Inserted module 'br_netfilter' Jul 15 11:25:12.758924 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:25:12.761726 kernel: audit: type=1130 audit(1752578712.758:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.760738 systemd-resolved[292]: Positive Trust Anchors: Jul 15 11:25:12.760745 systemd-resolved[292]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:25:12.760771 systemd-resolved[292]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:25:12.762414 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:25:12.771511 kernel: SCSI subsystem initialized Jul 15 11:25:12.771533 kernel: audit: type=1130 audit(1752578712.768:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.764981 systemd-resolved[292]: Defaulting to hostname 'linux'. Jul 15 11:25:12.765785 systemd[1]: Started systemd-resolved.service. Jul 15 11:25:12.770228 systemd[1]: Reached target nss-lookup.target. Jul 15 11:25:12.776129 dracut-cmdline[308]: dracut-dracut-053 Jul 15 11:25:12.777945 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:25:12.777967 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:25:12.777976 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:25:12.778496 dracut-cmdline[308]: Using kernel command line parameters: rd.driver.pre=btrfs BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected acpi=force verity.usrhash=66cb9a8d6ebbbd62ba3e197b019773f14f902d0ee05716ff2fc41a726e431e67 Jul 15 11:25:12.783829 systemd-modules-load[291]: Inserted module 'dm_multipath' Jul 15 11:25:12.784684 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:25:12.785000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.786463 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:25:12.789500 kernel: audit: type=1130 audit(1752578712.785:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.794508 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:25:12.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.797710 kernel: audit: type=1130 audit(1752578712.794:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.847726 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:25:12.859716 kernel: iscsi: registered transport (tcp) Jul 15 11:25:12.874806 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:25:12.874858 kernel: QLogic iSCSI HBA Driver Jul 15 11:25:12.910834 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:25:12.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.912288 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:25:12.914442 kernel: audit: type=1130 audit(1752578712.910:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:12.959722 kernel: raid6: neonx8 gen() 13757 MB/s Jul 15 11:25:12.976706 kernel: raid6: neonx8 xor() 10810 MB/s Jul 15 11:25:12.993716 kernel: raid6: neonx4 gen() 13564 MB/s Jul 15 11:25:13.010706 kernel: raid6: neonx4 xor() 11099 MB/s Jul 15 11:25:13.027714 kernel: raid6: neonx2 gen() 12965 MB/s Jul 15 11:25:13.044712 kernel: raid6: neonx2 xor() 10274 MB/s Jul 15 11:25:13.061714 kernel: raid6: neonx1 gen() 10577 MB/s Jul 15 11:25:13.078706 kernel: raid6: neonx1 xor() 8775 MB/s Jul 15 11:25:13.095714 kernel: raid6: int64x8 gen() 6278 MB/s Jul 15 11:25:13.112707 kernel: raid6: int64x8 xor() 3545 MB/s Jul 15 11:25:13.129706 kernel: raid6: int64x4 gen() 7211 MB/s Jul 15 11:25:13.146708 kernel: raid6: int64x4 xor() 3851 MB/s Jul 15 11:25:13.163706 kernel: raid6: int64x2 gen() 6153 MB/s Jul 15 11:25:13.180714 kernel: raid6: int64x2 xor() 3319 MB/s Jul 15 11:25:13.197706 kernel: raid6: int64x1 gen() 5044 MB/s Jul 15 11:25:13.214875 kernel: raid6: int64x1 xor() 2646 MB/s Jul 15 11:25:13.214889 kernel: raid6: using algorithm neonx8 gen() 13757 MB/s Jul 15 11:25:13.214898 kernel: raid6: .... xor() 10810 MB/s, rmw enabled Jul 15 11:25:13.214906 kernel: raid6: using neon recovery algorithm Jul 15 11:25:13.225710 kernel: xor: measuring software checksum speed Jul 15 11:25:13.225722 kernel: 8regs : 17213 MB/sec Jul 15 11:25:13.227008 kernel: 32regs : 19119 MB/sec Jul 15 11:25:13.227019 kernel: arm64_neon : 27794 MB/sec Jul 15 11:25:13.227028 kernel: xor: using function: arm64_neon (27794 MB/sec) Jul 15 11:25:13.282713 kernel: Btrfs loaded, crc32c=crc32c-generic, zoned=no, fsverity=no Jul 15 11:25:13.294716 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:25:13.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:13.297000 audit: BPF prog-id=7 op=LOAD Jul 15 11:25:13.297000 audit: BPF prog-id=8 op=LOAD Jul 15 11:25:13.297717 kernel: audit: type=1130 audit(1752578713.294:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:13.298135 systemd[1]: Starting systemd-udevd.service... Jul 15 11:25:13.309798 systemd-udevd[489]: Using default interface naming scheme 'v252'. Jul 15 11:25:13.313131 systemd[1]: Started systemd-udevd.service. Jul 15 11:25:13.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:13.316723 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:25:13.327935 dracut-pre-trigger[502]: rd.md=0: removing MD RAID activation Jul 15 11:25:13.354544 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:25:13.354000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:13.355934 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:25:13.389670 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:25:13.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:13.416906 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 15 11:25:13.421825 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 15 11:25:13.421850 kernel: GPT:9289727 != 19775487 Jul 15 11:25:13.421861 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 15 11:25:13.421870 kernel: GPT:9289727 != 19775487 Jul 15 11:25:13.421878 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:25:13.421887 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:25:13.437732 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by (udev-worker) (542) Jul 15 11:25:13.442371 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:25:13.443295 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:25:13.447848 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:25:13.451503 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:25:13.458251 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:25:13.459863 systemd[1]: Starting disk-uuid.service... Jul 15 11:25:13.466261 disk-uuid[559]: Primary Header is updated. Jul 15 11:25:13.466261 disk-uuid[559]: Secondary Entries is updated. Jul 15 11:25:13.466261 disk-uuid[559]: Secondary Header is updated. Jul 15 11:25:13.468855 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:25:14.495721 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 15 11:25:14.496026 disk-uuid[560]: The operation has completed successfully. Jul 15 11:25:14.527288 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:25:14.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.527000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.527395 systemd[1]: Finished disk-uuid.service. Jul 15 11:25:14.528789 systemd[1]: Starting verity-setup.service... Jul 15 11:25:14.543725 kernel: device-mapper: verity: sha256 using implementation "sha256-ce" Jul 15 11:25:14.563452 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:25:14.565475 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:25:14.567126 systemd[1]: Finished verity-setup.service. Jul 15 11:25:14.566000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.614716 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:25:14.615006 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:25:14.615611 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 15 11:25:14.616276 systemd[1]: Starting ignition-setup.service... Jul 15 11:25:14.617876 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:25:14.624002 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 15 11:25:14.624034 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:25:14.624043 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:25:14.631456 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:25:14.637369 systemd[1]: Finished ignition-setup.service. Jul 15 11:25:14.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.638642 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:25:14.701504 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:25:14.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.702000 audit: BPF prog-id=9 op=LOAD Jul 15 11:25:14.703438 systemd[1]: Starting systemd-networkd.service... Jul 15 11:25:14.720571 ignition[643]: Ignition 2.14.0 Jul 15 11:25:14.720581 ignition[643]: Stage: fetch-offline Jul 15 11:25:14.720614 ignition[643]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:25:14.720623 ignition[643]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:25:14.720762 ignition[643]: parsed url from cmdline: "" Jul 15 11:25:14.720766 ignition[643]: no config URL provided Jul 15 11:25:14.720770 ignition[643]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:25:14.720778 ignition[643]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:25:14.720794 ignition[643]: op(1): [started] loading QEMU firmware config module Jul 15 11:25:14.725642 systemd-networkd[737]: lo: Link UP Jul 15 11:25:14.727000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.720799 ignition[643]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 15 11:25:14.725645 systemd-networkd[737]: lo: Gained carrier Jul 15 11:25:14.726050 systemd-networkd[737]: Enumeration completed Jul 15 11:25:14.726230 systemd-networkd[737]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:25:14.730573 ignition[643]: op(1): [finished] loading QEMU firmware config module Jul 15 11:25:14.726775 systemd[1]: Started systemd-networkd.service. Jul 15 11:25:14.727323 systemd-networkd[737]: eth0: Link UP Jul 15 11:25:14.727326 systemd-networkd[737]: eth0: Gained carrier Jul 15 11:25:14.728053 systemd[1]: Reached target network.target. Jul 15 11:25:14.729705 systemd[1]: Starting iscsiuio.service... Jul 15 11:25:14.738741 systemd[1]: Started iscsiuio.service. Jul 15 11:25:14.738000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.740049 systemd[1]: Starting iscsid.service... Jul 15 11:25:14.743122 iscsid[743]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:25:14.743122 iscsid[743]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:25:14.743122 iscsid[743]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:25:14.743122 iscsid[743]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:25:14.743122 iscsid[743]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:25:14.743122 iscsid[743]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:25:14.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.746020 systemd[1]: Started iscsid.service. Jul 15 11:25:14.748757 systemd-networkd[737]: eth0: DHCPv4 address 10.0.0.138/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:25:14.749283 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:25:14.760786 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:25:14.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.761738 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:25:14.763068 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:25:14.764625 systemd[1]: Reached target remote-fs.target. Jul 15 11:25:14.766635 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:25:14.774076 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:25:14.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.789225 ignition[643]: parsing config with SHA512: b3aeae049c7423616b0773cc34e70d98326aa3f0a093be212f42c64cff5a8d12aef19f8e568d63bb0764cba3e5def6c921c07b8e35dd8cd2888d0b961462ef1b Jul 15 11:25:14.796961 unknown[643]: fetched base config from "system" Jul 15 11:25:14.796975 unknown[643]: fetched user config from "qemu" Jul 15 11:25:14.797466 ignition[643]: fetch-offline: fetch-offline passed Jul 15 11:25:14.798373 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:25:14.798000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.797530 ignition[643]: Ignition finished successfully Jul 15 11:25:14.799526 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:25:14.800265 systemd[1]: Starting ignition-kargs.service... Jul 15 11:25:14.809859 ignition[758]: Ignition 2.14.0 Jul 15 11:25:14.809868 ignition[758]: Stage: kargs Jul 15 11:25:14.809962 ignition[758]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:25:14.809971 ignition[758]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:25:14.810984 ignition[758]: kargs: kargs passed Jul 15 11:25:14.811031 ignition[758]: Ignition finished successfully Jul 15 11:25:14.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.813249 systemd[1]: Finished ignition-kargs.service. Jul 15 11:25:14.814949 systemd[1]: Starting ignition-disks.service... Jul 15 11:25:14.821099 ignition[764]: Ignition 2.14.0 Jul 15 11:25:14.821109 ignition[764]: Stage: disks Jul 15 11:25:14.821194 ignition[764]: no configs at "/usr/lib/ignition/base.d" Jul 15 11:25:14.821204 ignition[764]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:25:14.823447 systemd[1]: Finished ignition-disks.service. Jul 15 11:25:14.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.822075 ignition[764]: disks: disks passed Jul 15 11:25:14.824796 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:25:14.822116 ignition[764]: Ignition finished successfully Jul 15 11:25:14.825808 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:25:14.826681 systemd[1]: Reached target local-fs.target. Jul 15 11:25:14.827697 systemd[1]: Reached target sysinit.target. Jul 15 11:25:14.828622 systemd[1]: Reached target basic.target. Jul 15 11:25:14.830370 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:25:14.841108 systemd-fsck[772]: ROOT: clean, 619/553520 files, 56022/553472 blocks Jul 15 11:25:14.844709 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:25:14.844000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.846129 systemd[1]: Mounting sysroot.mount... Jul 15 11:25:14.852462 systemd[1]: Mounted sysroot.mount. Jul 15 11:25:14.853371 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:25:14.853054 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:25:14.854773 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:25:14.855556 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:25:14.855590 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:25:14.855612 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:25:14.857186 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:25:14.859463 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:25:14.863511 initrd-setup-root[782]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:25:14.867586 initrd-setup-root[790]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:25:14.871395 initrd-setup-root[798]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:25:14.875069 initrd-setup-root[806]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:25:14.899190 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:25:14.899000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.900450 systemd[1]: Starting ignition-mount.service... Jul 15 11:25:14.901567 systemd[1]: Starting sysroot-boot.service... Jul 15 11:25:14.906078 bash[823]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:25:14.914215 ignition[825]: INFO : Ignition 2.14.0 Jul 15 11:25:14.914215 ignition[825]: INFO : Stage: mount Jul 15 11:25:14.915345 ignition[825]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:25:14.915345 ignition[825]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:25:14.915345 ignition[825]: INFO : mount: mount passed Jul 15 11:25:14.915345 ignition[825]: INFO : Ignition finished successfully Jul 15 11:25:14.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:14.916346 systemd[1]: Finished ignition-mount.service. Jul 15 11:25:14.918867 systemd[1]: Finished sysroot-boot.service. Jul 15 11:25:14.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:15.573919 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:25:15.579718 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/vda6 scanned by mount (833) Jul 15 11:25:15.579751 kernel: BTRFS info (device vda6): using crc32c (crc32c-generic) checksum algorithm Jul 15 11:25:15.580809 kernel: BTRFS info (device vda6): using free space tree Jul 15 11:25:15.580838 kernel: BTRFS info (device vda6): has skinny extents Jul 15 11:25:15.584131 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:25:15.585465 systemd[1]: Starting ignition-files.service... Jul 15 11:25:15.599043 ignition[853]: INFO : Ignition 2.14.0 Jul 15 11:25:15.599043 ignition[853]: INFO : Stage: files Jul 15 11:25:15.600162 ignition[853]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:25:15.600162 ignition[853]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:25:15.600162 ignition[853]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:25:15.604928 ignition[853]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:25:15.604928 ignition[853]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:25:15.607849 ignition[853]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:25:15.608786 ignition[853]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:25:15.609977 unknown[853]: wrote ssh authorized keys file for user: core Jul 15 11:25:15.610831 ignition[853]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:25:15.610831 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 15 11:25:15.610831 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-arm64.tar.gz: attempt #1 Jul 15 11:25:15.669387 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:25:15.833273 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-arm64.tar.gz" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:25:15.834706 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:25:15.845364 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:25:15.845364 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 15 11:25:15.845364 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 15 11:25:15.845364 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 15 11:25:15.845364 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-arm64.raw: attempt #1 Jul 15 11:25:15.936854 systemd-networkd[737]: eth0: Gained IPv6LL Jul 15 11:25:16.450105 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 15 11:25:16.714215 ignition[853]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-arm64.raw" Jul 15 11:25:16.714215 ignition[853]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:25:16.716869 ignition[853]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:25:16.756621 ignition[853]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:25:16.757733 ignition[853]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:25:16.757733 ignition[853]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:25:16.757733 ignition[853]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:25:16.757733 ignition[853]: INFO : files: files passed Jul 15 11:25:16.757733 ignition[853]: INFO : Ignition finished successfully Jul 15 11:25:16.758000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.758100 systemd[1]: Finished ignition-files.service. Jul 15 11:25:16.760376 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:25:16.761323 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:25:16.767532 initrd-setup-root-after-ignition[878]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 15 11:25:16.761993 systemd[1]: Starting ignition-quench.service... Jul 15 11:25:16.769000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.767760 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:25:16.767845 systemd[1]: Finished ignition-quench.service. Jul 15 11:25:16.770868 initrd-setup-root-after-ignition[881]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:25:16.770000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.770560 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:25:16.771553 systemd[1]: Reached target ignition-complete.target. Jul 15 11:25:16.773783 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:25:16.785684 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:25:16.785810 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:25:16.786000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.786000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.787086 systemd[1]: Reached target initrd-fs.target. Jul 15 11:25:16.787978 systemd[1]: Reached target initrd.target. Jul 15 11:25:16.788917 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:25:16.789595 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:25:16.799343 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:25:16.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.800589 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:25:16.808363 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:25:16.809026 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:25:16.810068 systemd[1]: Stopped target timers.target. Jul 15 11:25:16.811042 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:25:16.811000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.811146 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:25:16.812060 systemd[1]: Stopped target initrd.target. Jul 15 11:25:16.813007 systemd[1]: Stopped target basic.target. Jul 15 11:25:16.813900 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:25:16.814838 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:25:16.815781 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:25:16.816832 systemd[1]: Stopped target remote-fs.target. Jul 15 11:25:16.817782 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:25:16.818921 systemd[1]: Stopped target sysinit.target. Jul 15 11:25:16.819813 systemd[1]: Stopped target local-fs.target. Jul 15 11:25:16.820740 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:25:16.821787 systemd[1]: Stopped target swap.target. Jul 15 11:25:16.823000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.822686 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:25:16.822838 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:25:16.825000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.823871 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:25:16.826000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.824755 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:25:16.824863 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:25:16.825908 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:25:16.826007 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:25:16.826905 systemd[1]: Stopped target paths.target. Jul 15 11:25:16.827682 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:25:16.832735 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:25:16.833422 systemd[1]: Stopped target slices.target. Jul 15 11:25:16.834396 systemd[1]: Stopped target sockets.target. Jul 15 11:25:16.835276 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:25:16.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.835385 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:25:16.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.836354 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:25:16.836445 systemd[1]: Stopped ignition-files.service. Jul 15 11:25:16.840944 iscsid[743]: iscsid shutting down. Jul 15 11:25:16.838267 systemd[1]: Stopping ignition-mount.service... Jul 15 11:25:16.839460 systemd[1]: Stopping iscsid.service... Jul 15 11:25:16.843055 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:25:16.843552 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:25:16.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.845239 ignition[894]: INFO : Ignition 2.14.0 Jul 15 11:25:16.845239 ignition[894]: INFO : Stage: umount Jul 15 11:25:16.845239 ignition[894]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 15 11:25:16.845239 ignition[894]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 15 11:25:16.845000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.843703 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:25:16.849502 ignition[894]: INFO : umount: umount passed Jul 15 11:25:16.849502 ignition[894]: INFO : Ignition finished successfully Jul 15 11:25:16.848000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.849000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.844651 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:25:16.851000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.844769 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:25:16.852000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.847866 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:25:16.853000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.847953 systemd[1]: Stopped iscsid.service. Jul 15 11:25:16.849363 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:25:16.849438 systemd[1]: Stopped ignition-mount.service. Jul 15 11:25:16.858000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.850429 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:25:16.859000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.859000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.850481 systemd[1]: Closed iscsid.socket. Jul 15 11:25:16.851119 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:25:16.851156 systemd[1]: Stopped ignition-disks.service. Jul 15 11:25:16.852260 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:25:16.852295 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:25:16.853343 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:25:16.853378 systemd[1]: Stopped ignition-setup.service. Jul 15 11:25:16.855181 systemd[1]: Stopping iscsiuio.service... Jul 15 11:25:16.856551 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:25:16.857042 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:25:16.857182 systemd[1]: Stopped iscsiuio.service. Jul 15 11:25:16.858361 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:25:16.858436 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:25:16.870000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.859860 systemd[1]: Stopped target network.target. Jul 15 11:25:16.860713 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:25:16.860747 systemd[1]: Closed iscsiuio.socket. Jul 15 11:25:16.861806 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:25:16.862988 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:25:16.867869 systemd-networkd[737]: eth0: DHCPv6 lease lost Jul 15 11:25:16.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.868938 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:25:16.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.876000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:25:16.869036 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:25:16.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.870498 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:25:16.870529 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:25:16.873057 systemd[1]: Stopping network-cleanup.service... Jul 15 11:25:16.874150 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:25:16.874204 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:25:16.883000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.875469 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:25:16.875511 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:25:16.877063 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:25:16.877103 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:25:16.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.877860 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:25:16.883194 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:25:16.883631 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:25:16.889000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.883736 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:25:16.892000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:25:16.886867 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:25:16.886964 systemd[1]: Stopped network-cleanup.service. Jul 15 11:25:16.893000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.889075 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:25:16.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.889191 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:25:16.895000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.890756 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:25:16.890796 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:25:16.891651 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:25:16.898000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.891681 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:25:16.900000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.892755 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:25:16.901000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.892801 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:25:16.893954 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:25:16.893994 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:25:16.902000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.894904 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:25:16.903000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.903000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.894943 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:25:16.896799 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:25:16.906000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:16.897745 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 15 11:25:16.897805 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 15 11:25:16.899502 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:25:16.899541 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:25:16.900218 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:25:16.900255 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:25:16.901997 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 15 11:25:16.902408 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:25:16.902495 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:25:16.903604 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:25:16.903676 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:25:16.904536 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:25:16.905545 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:25:16.905590 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:25:16.907280 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:25:16.913282 systemd[1]: Switching root. Jul 15 11:25:16.926065 systemd-journald[290]: Journal stopped Jul 15 11:25:18.867329 systemd-journald[290]: Received SIGTERM from PID 1 (systemd). Jul 15 11:25:18.867385 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:25:18.867397 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:25:18.867412 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:25:18.867425 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:25:18.867435 kernel: SELinux: policy capability open_perms=1 Jul 15 11:25:18.867445 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:25:18.867459 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:25:18.867470 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:25:18.867480 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:25:18.867490 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:25:18.867499 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:25:18.867510 systemd[1]: Successfully loaded SELinux policy in 31.045ms. Jul 15 11:25:18.867528 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.716ms. Jul 15 11:25:18.867540 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:25:18.867552 systemd[1]: Detected virtualization kvm. Jul 15 11:25:18.867562 systemd[1]: Detected architecture arm64. Jul 15 11:25:18.867573 systemd[1]: Detected first boot. Jul 15 11:25:18.867583 systemd[1]: Initializing machine ID from VM UUID. Jul 15 11:25:18.867593 kernel: kauditd_printk_skb: 66 callbacks suppressed Jul 15 11:25:18.867604 kernel: audit: type=1400 audit(1752578717.058:77): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:25:18.867616 kernel: audit: type=1400 audit(1752578717.058:78): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:25:18.867626 kernel: audit: type=1334 audit(1752578717.059:79): prog-id=10 op=LOAD Jul 15 11:25:18.867639 kernel: audit: type=1334 audit(1752578717.059:80): prog-id=10 op=UNLOAD Jul 15 11:25:18.867649 kernel: audit: type=1334 audit(1752578717.060:81): prog-id=11 op=LOAD Jul 15 11:25:18.867659 kernel: audit: type=1334 audit(1752578717.060:82): prog-id=11 op=UNLOAD Jul 15 11:25:18.867668 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:25:18.867683 kernel: audit: type=1400 audit(1752578717.097:83): avc: denied { associate } for pid=928 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:25:18.867705 kernel: audit: type=1300 audit(1752578717.097:83): arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd8a4 a1=4000150de0 a2=4000157040 a3=32 items=0 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:18.867717 kernel: audit: type=1327 audit(1752578717.097:83): proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:25:18.867728 kernel: audit: type=1400 audit(1752578717.098:84): avc: denied { associate } for pid=928 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:25:18.867738 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:25:18.867749 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:25:18.867761 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:25:18.867773 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:25:18.867784 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:25:18.867795 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:25:18.867813 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:25:18.867826 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:25:18.867838 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:25:18.867848 systemd[1]: Created slice system-getty.slice. Jul 15 11:25:18.867858 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:25:18.867869 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:25:18.867879 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:25:18.867890 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:25:18.867900 systemd[1]: Created slice user.slice. Jul 15 11:25:18.867912 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:25:18.867923 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:25:18.867933 systemd[1]: Set up automount boot.automount. Jul 15 11:25:18.867943 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:25:18.867955 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:25:18.867965 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:25:18.867976 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:25:18.867986 systemd[1]: Reached target integritysetup.target. Jul 15 11:25:18.867997 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:25:18.868009 systemd[1]: Reached target remote-fs.target. Jul 15 11:25:18.868019 systemd[1]: Reached target slices.target. Jul 15 11:25:18.868030 systemd[1]: Reached target swap.target. Jul 15 11:25:18.868040 systemd[1]: Reached target torcx.target. Jul 15 11:25:18.868050 systemd[1]: Reached target veritysetup.target. Jul 15 11:25:18.868061 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:25:18.868071 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:25:18.868082 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:25:18.868092 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:25:18.868102 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:25:18.868114 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:25:18.868125 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:25:18.868135 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:25:18.868145 systemd[1]: Mounting media.mount... Jul 15 11:25:18.868155 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:25:18.868165 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:25:18.868177 systemd[1]: Mounting tmp.mount... Jul 15 11:25:18.868188 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:25:18.868199 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:25:18.868210 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:25:18.868220 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:25:18.868230 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:25:18.868241 systemd[1]: Starting modprobe@drm.service... Jul 15 11:25:18.868251 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:25:18.868261 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:25:18.868271 systemd[1]: Starting modprobe@loop.service... Jul 15 11:25:18.868282 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:25:18.868293 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:25:18.868304 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:25:18.868315 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:25:18.868326 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:25:18.868335 kernel: loop: module loaded Jul 15 11:25:18.868347 systemd[1]: Stopped systemd-journald.service. Jul 15 11:25:18.868358 kernel: fuse: init (API version 7.34) Jul 15 11:25:18.868368 systemd[1]: Starting systemd-journald.service... Jul 15 11:25:18.868378 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:25:18.868388 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:25:18.868399 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:25:18.868410 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:25:18.868420 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:25:18.868431 systemd[1]: Stopped verity-setup.service. Jul 15 11:25:18.868441 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:25:18.868451 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:25:18.868461 systemd[1]: Mounted media.mount. Jul 15 11:25:18.868471 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:25:18.868481 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:25:18.868491 systemd[1]: Mounted tmp.mount. Jul 15 11:25:18.868501 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:25:18.868511 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:25:18.868525 systemd-journald[994]: Journal started Jul 15 11:25:18.868563 systemd-journald[994]: Runtime Journal (/run/log/journal/0ac024c74ac94bffa6b4311e58edb2c7) is 6.0M, max 48.7M, 42.6M free. Jul 15 11:25:16.984000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:25:17.058000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:25:17.058000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:25:17.059000 audit: BPF prog-id=10 op=LOAD Jul 15 11:25:17.059000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:25:17.060000 audit: BPF prog-id=11 op=LOAD Jul 15 11:25:17.060000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:25:17.097000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:25:17.097000 audit[928]: SYSCALL arch=c00000b7 syscall=5 success=yes exit=0 a0=40001cd8a4 a1=4000150de0 a2=4000157040 a3=32 items=0 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:17.097000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:25:17.098000 audit[928]: AVC avc: denied { associate } for pid=928 comm="torcx-generator" name="lib" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:25:17.098000 audit[928]: SYSCALL arch=c00000b7 syscall=34 success=yes exit=0 a0=ffffffffffffff9c a1=40001cd979 a2=1ed a3=0 items=2 ppid=911 pid=928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:17.098000 audit: CWD cwd="/" Jul 15 11:25:17.098000 audit: PATH item=0 name=(null) inode=2 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:25:17.098000 audit: PATH item=1 name=(null) inode=3 dev=00:1c mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:25:17.098000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:25:18.756000 audit: BPF prog-id=12 op=LOAD Jul 15 11:25:18.756000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:25:18.756000 audit: BPF prog-id=13 op=LOAD Jul 15 11:25:18.756000 audit: BPF prog-id=14 op=LOAD Jul 15 11:25:18.756000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:25:18.756000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:25:18.757000 audit: BPF prog-id=15 op=LOAD Jul 15 11:25:18.757000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:25:18.757000 audit: BPF prog-id=16 op=LOAD Jul 15 11:25:18.757000 audit: BPF prog-id=17 op=LOAD Jul 15 11:25:18.757000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:25:18.757000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:25:18.758000 audit: BPF prog-id=18 op=LOAD Jul 15 11:25:18.758000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:25:18.758000 audit: BPF prog-id=19 op=LOAD Jul 15 11:25:18.758000 audit: BPF prog-id=20 op=LOAD Jul 15 11:25:18.758000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:25:18.758000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:25:18.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.773000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:25:18.838000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.841000 audit: BPF prog-id=21 op=LOAD Jul 15 11:25:18.841000 audit: BPF prog-id=22 op=LOAD Jul 15 11:25:18.841000 audit: BPF prog-id=23 op=LOAD Jul 15 11:25:18.841000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:25:18.841000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:25:18.855000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.864000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:25:18.864000 audit[994]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=60 a0=4 a1=ffffe3b73880 a2=4000 a3=1 items=0 ppid=1 pid=994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:18.864000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:25:18.867000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:17.096225 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:25:18.756133 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:25:18.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.871000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:17.096478 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:25:18.756144 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 15 11:25:17.096496 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:25:18.759452 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:25:17.096524 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:25:18.873059 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:25:18.873081 systemd[1]: Started systemd-journald.service. Jul 15 11:25:17.096533 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:25:17.096558 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:25:17.096569 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:25:17.096774 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:25:17.096806 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:25:17.096827 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:25:17.097503 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:25:17.097534 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:25:17.097561 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:25:18.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:17.097575 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:25:17.097592 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:25:17.097605 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:17Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:25:18.520536 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:18Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:25:18.520823 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:18Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:25:18.520923 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:18Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:25:18.521092 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:18Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:25:18.874175 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:25:18.521142 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:18Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:25:18.521199 /usr/lib/systemd/system-generators/torcx-generator[928]: time="2025-07-15T11:25:18Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:25:18.874333 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:25:18.874000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.874000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.875237 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:25:18.875386 systemd[1]: Finished modprobe@drm.service. Jul 15 11:25:18.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.875000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.876204 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:25:18.876000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.876000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.876488 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:25:18.877347 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:25:18.877491 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:25:18.878390 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:25:18.878538 systemd[1]: Finished modprobe@loop.service. Jul 15 11:25:18.878000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.878000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.879430 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:25:18.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.880454 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:25:18.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.881384 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:25:18.881000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.882437 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:25:18.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.883480 systemd[1]: Reached target network-pre.target. Jul 15 11:25:18.885233 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:25:18.886928 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:25:18.887495 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:25:18.889198 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:25:18.891007 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:25:18.891612 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:25:18.893235 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:25:18.893991 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:25:18.895163 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:25:18.896902 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:25:18.898801 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:25:18.900858 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:25:18.907729 systemd-journald[994]: Time spent on flushing to /var/log/journal/0ac024c74ac94bffa6b4311e58edb2c7 is 18.855ms for 1004 entries. Jul 15 11:25:18.907729 systemd-journald[994]: System Journal (/var/log/journal/0ac024c74ac94bffa6b4311e58edb2c7) is 8.0M, max 195.6M, 187.6M free. Jul 15 11:25:18.936418 systemd-journald[994]: Received client request to flush runtime journal. Jul 15 11:25:18.906000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.915000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.916000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.923000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.906067 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:25:18.906800 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:25:18.936967 udevadm[1030]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 15 11:25:18.915305 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:25:18.916361 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:25:18.918404 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:25:18.923273 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:25:18.926816 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:25:18.937399 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:25:18.937000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:18.948303 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:25:18.948000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.245983 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:25:19.246000 audit: BPF prog-id=24 op=LOAD Jul 15 11:25:19.246000 audit: BPF prog-id=25 op=LOAD Jul 15 11:25:19.246000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:25:19.246000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:25:19.247916 systemd[1]: Starting systemd-udevd.service... Jul 15 11:25:19.268388 systemd-udevd[1034]: Using default interface naming scheme 'v252'. Jul 15 11:25:19.279579 systemd[1]: Started systemd-udevd.service. Jul 15 11:25:19.279000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.280000 audit: BPF prog-id=26 op=LOAD Jul 15 11:25:19.282202 systemd[1]: Starting systemd-networkd.service... Jul 15 11:25:19.287000 audit: BPF prog-id=27 op=LOAD Jul 15 11:25:19.287000 audit: BPF prog-id=28 op=LOAD Jul 15 11:25:19.287000 audit: BPF prog-id=29 op=LOAD Jul 15 11:25:19.288417 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:25:19.298756 systemd[1]: Condition check resulted in dev-ttyAMA0.device being skipped. Jul 15 11:25:19.318097 systemd[1]: Started systemd-userdbd.service. Jul 15 11:25:19.318000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.348169 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:25:19.370775 systemd-networkd[1043]: lo: Link UP Jul 15 11:25:19.370784 systemd-networkd[1043]: lo: Gained carrier Jul 15 11:25:19.371168 systemd-networkd[1043]: Enumeration completed Jul 15 11:25:19.371249 systemd[1]: Started systemd-networkd.service. Jul 15 11:25:19.371000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.372007 systemd-networkd[1043]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 15 11:25:19.376074 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:25:19.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.377839 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:25:19.379583 systemd-networkd[1043]: eth0: Link UP Jul 15 11:25:19.379593 systemd-networkd[1043]: eth0: Gained carrier Jul 15 11:25:19.389777 lvm[1067]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:25:19.403849 systemd-networkd[1043]: eth0: DHCPv4 address 10.0.0.138/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 15 11:25:19.418399 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:25:19.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.419144 systemd[1]: Reached target cryptsetup.target. Jul 15 11:25:19.420639 systemd[1]: Starting lvm2-activation.service... Jul 15 11:25:19.424008 lvm[1068]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:25:19.452497 systemd[1]: Finished lvm2-activation.service. Jul 15 11:25:19.452000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.453208 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:25:19.453821 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:25:19.453849 systemd[1]: Reached target local-fs.target. Jul 15 11:25:19.454386 systemd[1]: Reached target machines.target. Jul 15 11:25:19.455943 systemd[1]: Starting ldconfig.service... Jul 15 11:25:19.456778 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:25:19.456838 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:19.457936 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:25:19.459569 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:25:19.461611 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:25:19.464384 systemd[1]: Starting systemd-sysext.service... Jul 15 11:25:19.468082 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1070 (bootctl) Jul 15 11:25:19.469444 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:25:19.473791 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:25:19.475067 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:25:19.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.478297 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:25:19.478445 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:25:19.495728 kernel: loop0: detected capacity change from 0 to 207008 Jul 15 11:25:19.501995 systemd-fsck[1079]: fsck.fat 4.2 (2021-01-31) Jul 15 11:25:19.501995 systemd-fsck[1079]: /dev/vda1: 236 files, 117310/258078 clusters Jul 15 11:25:19.502564 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:25:19.502000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.504616 systemd[1]: Mounting boot.mount... Jul 15 11:25:19.546363 systemd[1]: Mounted boot.mount. Jul 15 11:25:19.551468 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:25:19.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.555943 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:25:19.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.559733 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:25:19.575707 kernel: loop1: detected capacity change from 0 to 207008 Jul 15 11:25:19.581697 (sd-sysext)[1086]: Using extensions 'kubernetes'. Jul 15 11:25:19.582316 (sd-sysext)[1086]: Merged extensions into '/usr'. Jul 15 11:25:19.603685 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:25:19.605294 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:25:19.607201 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:25:19.609188 systemd[1]: Starting modprobe@loop.service... Jul 15 11:25:19.609994 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:25:19.610155 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:19.611060 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:25:19.611222 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:25:19.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.611000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.612316 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:25:19.612444 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:25:19.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.613499 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:25:19.613646 systemd[1]: Finished modprobe@loop.service. Jul 15 11:25:19.613000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.613000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.614959 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:25:19.615097 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:25:19.636125 ldconfig[1069]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:25:19.639257 systemd[1]: Finished ldconfig.service. Jul 15 11:25:19.639000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.858491 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:25:19.860421 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:25:19.865286 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:25:19.866923 systemd[1]: Finished systemd-sysext.service. Jul 15 11:25:19.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:19.868571 systemd[1]: Starting ensure-sysext.service... Jul 15 11:25:19.870045 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:25:19.874185 systemd[1]: Reloading. Jul 15 11:25:19.879057 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:25:19.880221 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:25:19.881523 systemd-tmpfiles[1093]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:25:19.911444 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-15T11:25:19Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:25:19.911475 /usr/lib/systemd/system-generators/torcx-generator[1113]: time="2025-07-15T11:25:19Z" level=info msg="torcx already run" Jul 15 11:25:19.967188 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:25:19.967207 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:25:19.982351 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:25:20.025000 audit: BPF prog-id=30 op=LOAD Jul 15 11:25:20.025000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:25:20.025000 audit: BPF prog-id=31 op=LOAD Jul 15 11:25:20.025000 audit: BPF prog-id=32 op=LOAD Jul 15 11:25:20.025000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:25:20.025000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:25:20.025000 audit: BPF prog-id=33 op=LOAD Jul 15 11:25:20.025000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:25:20.026000 audit: BPF prog-id=34 op=LOAD Jul 15 11:25:20.026000 audit: BPF prog-id=35 op=LOAD Jul 15 11:25:20.026000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:25:20.026000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:25:20.026000 audit: BPF prog-id=36 op=LOAD Jul 15 11:25:20.026000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:25:20.026000 audit: BPF prog-id=37 op=LOAD Jul 15 11:25:20.026000 audit: BPF prog-id=38 op=LOAD Jul 15 11:25:20.026000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:25:20.026000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:25:20.028803 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:25:20.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.032826 systemd[1]: Starting audit-rules.service... Jul 15 11:25:20.034402 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:25:20.037000 audit: BPF prog-id=39 op=LOAD Jul 15 11:25:20.039000 audit: BPF prog-id=40 op=LOAD Jul 15 11:25:20.036876 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:25:20.039051 systemd[1]: Starting systemd-resolved.service... Jul 15 11:25:20.041300 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:25:20.045748 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:25:20.052000 audit[1162]: SYSTEM_BOOT pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.057480 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:25:20.058000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.061169 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.062592 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:25:20.064634 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:25:20.066473 systemd[1]: Starting modprobe@loop.service... Jul 15 11:25:20.068732 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.068956 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:20.069131 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:25:20.070407 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:25:20.071000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.071812 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:25:20.071974 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:25:20.072000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.072000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.073078 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:25:20.073175 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:25:20.073000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.073000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.074451 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:25:20.074555 systemd[1]: Finished modprobe@loop.service. Jul 15 11:25:20.075000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.075000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.076790 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:25:20.076000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.078546 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.079855 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:25:20.081440 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:25:20.083270 systemd[1]: Starting modprobe@loop.service... Jul 15 11:25:20.083907 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.084019 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:20.085228 systemd[1]: Starting systemd-update-done.service... Jul 15 11:25:20.085945 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:25:20.086915 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:25:20.087036 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:25:20.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.087000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.088016 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:25:20.088125 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:25:20.088000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.088000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.089091 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:25:20.089200 systemd[1]: Finished modprobe@loop.service. Jul 15 11:25:20.089000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.089000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.092105 systemd[1]: Finished systemd-update-done.service. Jul 15 11:25:20.092000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.093249 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.094421 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:25:20.096279 systemd[1]: Starting modprobe@drm.service... Jul 15 11:25:20.098229 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:25:20.100002 systemd[1]: Starting modprobe@loop.service... Jul 15 11:25:20.100662 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.100805 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:20.102037 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:25:20.102902 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:25:20.104085 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:25:20.104211 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:25:20.106000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.106000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.107880 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:25:20.107997 systemd[1]: Finished modprobe@drm.service. Jul 15 11:25:20.107000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.107000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.108988 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:25:20.109096 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:25:20.109000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.109000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.110119 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:25:20.110224 systemd[1]: Finished modprobe@loop.service. Jul 15 11:25:20.110000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.110000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.111488 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:25:20.111559 systemd-timesyncd[1161]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 15 11:25:20.111614 systemd-timesyncd[1161]: Initial clock synchronization to Tue 2025-07-15 11:25:20.281191 UTC. Jul 15 11:25:20.112000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:20.112000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:25:20.112000 audit[1179]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffc98a22a0 a2=420 a3=0 items=0 ppid=1151 pid=1179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:20.112000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:25:20.112928 systemd[1]: Reached target time-set.target. Jul 15 11:25:20.113485 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:25:20.113523 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.113600 augenrules[1179]: No rules Jul 15 11:25:20.113850 systemd[1]: Finished ensure-sysext.service. Jul 15 11:25:20.114672 systemd[1]: Finished audit-rules.service. Jul 15 11:25:20.124362 systemd-resolved[1160]: Positive Trust Anchors: Jul 15 11:25:20.124595 systemd-resolved[1160]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:25:20.124670 systemd-resolved[1160]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:25:20.134367 systemd-resolved[1160]: Defaulting to hostname 'linux'. Jul 15 11:25:20.139517 systemd[1]: Started systemd-resolved.service. Jul 15 11:25:20.140213 systemd[1]: Reached target network.target. Jul 15 11:25:20.140823 systemd[1]: Reached target nss-lookup.target. Jul 15 11:25:20.141372 systemd[1]: Reached target sysinit.target. Jul 15 11:25:20.141999 systemd[1]: Started motdgen.path. Jul 15 11:25:20.142505 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:25:20.143459 systemd[1]: Started logrotate.timer. Jul 15 11:25:20.144137 systemd[1]: Started mdadm.timer. Jul 15 11:25:20.144624 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:25:20.145248 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:25:20.145277 systemd[1]: Reached target paths.target. Jul 15 11:25:20.145792 systemd[1]: Reached target timers.target. Jul 15 11:25:20.146616 systemd[1]: Listening on dbus.socket. Jul 15 11:25:20.148223 systemd[1]: Starting docker.socket... Jul 15 11:25:20.151570 systemd[1]: Listening on sshd.socket. Jul 15 11:25:20.152252 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:20.152673 systemd[1]: Listening on docker.socket. Jul 15 11:25:20.153298 systemd[1]: Reached target sockets.target. Jul 15 11:25:20.153883 systemd[1]: Reached target basic.target. Jul 15 11:25:20.154432 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.154461 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:25:20.155392 systemd[1]: Starting containerd.service... Jul 15 11:25:20.156923 systemd[1]: Starting dbus.service... Jul 15 11:25:20.158493 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:25:20.160299 systemd[1]: Starting extend-filesystems.service... Jul 15 11:25:20.161010 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:25:20.162395 systemd[1]: Starting motdgen.service... Jul 15 11:25:20.165569 jq[1193]: false Jul 15 11:25:20.168356 systemd[1]: Starting prepare-helm.service... Jul 15 11:25:20.170000 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:25:20.171769 systemd[1]: Starting sshd-keygen.service... Jul 15 11:25:20.175735 systemd[1]: Starting systemd-logind.service... Jul 15 11:25:20.176331 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:25:20.176418 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:25:20.176909 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:25:20.177589 systemd[1]: Starting update-engine.service... Jul 15 11:25:20.179937 extend-filesystems[1194]: Found loop1 Jul 15 11:25:20.179937 extend-filesystems[1194]: Found vda Jul 15 11:25:20.179937 extend-filesystems[1194]: Found vda1 Jul 15 11:25:20.179937 extend-filesystems[1194]: Found vda2 Jul 15 11:25:20.185787 extend-filesystems[1194]: Found vda3 Jul 15 11:25:20.185787 extend-filesystems[1194]: Found usr Jul 15 11:25:20.185787 extend-filesystems[1194]: Found vda4 Jul 15 11:25:20.185787 extend-filesystems[1194]: Found vda6 Jul 15 11:25:20.185787 extend-filesystems[1194]: Found vda7 Jul 15 11:25:20.185787 extend-filesystems[1194]: Found vda9 Jul 15 11:25:20.185787 extend-filesystems[1194]: Checking size of /dev/vda9 Jul 15 11:25:20.180582 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:25:20.188500 dbus-daemon[1192]: [system] SELinux support is enabled Jul 15 11:25:20.205857 jq[1208]: true Jul 15 11:25:20.183045 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:25:20.183220 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:25:20.184131 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:25:20.206634 jq[1216]: true Jul 15 11:25:20.184291 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:25:20.190509 systemd[1]: Started dbus.service. Jul 15 11:25:20.195282 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:25:20.195317 systemd[1]: Reached target system-config.target. Jul 15 11:25:20.196169 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:25:20.196203 systemd[1]: Reached target user-config.target. Jul 15 11:25:20.197180 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:25:20.197397 systemd[1]: Finished motdgen.service. Jul 15 11:25:20.227093 extend-filesystems[1194]: Resized partition /dev/vda9 Jul 15 11:25:20.231151 tar[1212]: linux-arm64/LICENSE Jul 15 11:25:20.231151 tar[1212]: linux-arm64/helm Jul 15 11:25:20.231364 extend-filesystems[1233]: resize2fs 1.46.5 (30-Dec-2021) Jul 15 11:25:20.237159 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 15 11:25:20.247419 systemd-logind[1204]: Watching system buttons on /dev/input/event0 (Power Button) Jul 15 11:25:20.250322 systemd-logind[1204]: New seat seat0. Jul 15 11:25:20.268711 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 15 11:25:20.275370 systemd[1]: Started systemd-logind.service. Jul 15 11:25:20.284473 systemd[1]: Started update-engine.service. Jul 15 11:25:20.285682 update_engine[1207]: I0715 11:25:20.277498 1207 main.cc:92] Flatcar Update Engine starting Jul 15 11:25:20.285682 update_engine[1207]: I0715 11:25:20.284523 1207 update_check_scheduler.cc:74] Next update check in 9m56s Jul 15 11:25:20.286085 extend-filesystems[1233]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 15 11:25:20.286085 extend-filesystems[1233]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 15 11:25:20.286085 extend-filesystems[1233]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 15 11:25:20.288131 systemd[1]: Started locksmithd.service. Jul 15 11:25:20.290090 extend-filesystems[1194]: Resized filesystem in /dev/vda9 Jul 15 11:25:20.290298 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:25:20.290461 systemd[1]: Finished extend-filesystems.service. Jul 15 11:25:20.297986 bash[1242]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:25:20.298222 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:25:20.312725 env[1217]: time="2025-07-15T11:25:20.311780760Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:25:20.351191 env[1217]: time="2025-07-15T11:25:20.351147760Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:25:20.351442 env[1217]: time="2025-07-15T11:25:20.351422800Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:25:20.352194 locksmithd[1245]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.353776800Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.353819520Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354031360Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354048120Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354061160Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354071320Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354145040Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354350720Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354465760Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:25:20.354665 env[1217]: time="2025-07-15T11:25:20.354480560Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:25:20.354950 env[1217]: time="2025-07-15T11:25:20.354527600Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:25:20.354950 env[1217]: time="2025-07-15T11:25:20.354541320Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357460200Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357490160Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357503680Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357534640Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357549600Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357563240Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.357712 env[1217]: time="2025-07-15T11:25:20.357575960Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.358226 env[1217]: time="2025-07-15T11:25:20.358198440Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.358307 env[1217]: time="2025-07-15T11:25:20.358292280Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.358368 env[1217]: time="2025-07-15T11:25:20.358354960Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.358428 env[1217]: time="2025-07-15T11:25:20.358415560Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.358486 env[1217]: time="2025-07-15T11:25:20.358473800Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:25:20.358649 env[1217]: time="2025-07-15T11:25:20.358630080Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:25:20.358916 env[1217]: time="2025-07-15T11:25:20.358866840Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:25:20.359227 env[1217]: time="2025-07-15T11:25:20.359207000Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:25:20.359320 env[1217]: time="2025-07-15T11:25:20.359306320Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359384 env[1217]: time="2025-07-15T11:25:20.359371160Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:25:20.359548 env[1217]: time="2025-07-15T11:25:20.359532200Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359613 env[1217]: time="2025-07-15T11:25:20.359599920Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359671 env[1217]: time="2025-07-15T11:25:20.359658040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359745 env[1217]: time="2025-07-15T11:25:20.359731040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359809 env[1217]: time="2025-07-15T11:25:20.359786800Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359865 env[1217]: time="2025-07-15T11:25:20.359852680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359917 env[1217]: time="2025-07-15T11:25:20.359905560Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.359984 env[1217]: time="2025-07-15T11:25:20.359970880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.360049 env[1217]: time="2025-07-15T11:25:20.360036640Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:25:20.360222 env[1217]: time="2025-07-15T11:25:20.360204680Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.360295 env[1217]: time="2025-07-15T11:25:20.360281040Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.360360 env[1217]: time="2025-07-15T11:25:20.360347440Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.360416 env[1217]: time="2025-07-15T11:25:20.360403280Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:25:20.360473 env[1217]: time="2025-07-15T11:25:20.360458320Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:25:20.360524 env[1217]: time="2025-07-15T11:25:20.360511840Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:25:20.360587 env[1217]: time="2025-07-15T11:25:20.360573320Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:25:20.360666 env[1217]: time="2025-07-15T11:25:20.360652720Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:25:20.361000 env[1217]: time="2025-07-15T11:25:20.360943320Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:25:20.363384 env[1217]: time="2025-07-15T11:25:20.361345000Z" level=info msg="Connect containerd service" Jul 15 11:25:20.363384 env[1217]: time="2025-07-15T11:25:20.361387520Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:25:20.364273 env[1217]: time="2025-07-15T11:25:20.364228880Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:25:20.364567 env[1217]: time="2025-07-15T11:25:20.364468880Z" level=info msg="Start subscribing containerd event" Jul 15 11:25:20.364628 env[1217]: time="2025-07-15T11:25:20.364575640Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:25:20.364628 env[1217]: time="2025-07-15T11:25:20.364588080Z" level=info msg="Start recovering state" Jul 15 11:25:20.364628 env[1217]: time="2025-07-15T11:25:20.364612800Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:25:20.364705 env[1217]: time="2025-07-15T11:25:20.364649880Z" level=info msg="Start event monitor" Jul 15 11:25:20.364705 env[1217]: time="2025-07-15T11:25:20.364658200Z" level=info msg="containerd successfully booted in 0.053817s" Jul 15 11:25:20.364705 env[1217]: time="2025-07-15T11:25:20.364668520Z" level=info msg="Start snapshots syncer" Jul 15 11:25:20.364705 env[1217]: time="2025-07-15T11:25:20.364678800Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:25:20.364705 env[1217]: time="2025-07-15T11:25:20.364686840Z" level=info msg="Start streaming server" Jul 15 11:25:20.364737 systemd[1]: Started containerd.service. Jul 15 11:25:20.632993 tar[1212]: linux-arm64/README.md Jul 15 11:25:20.637373 systemd[1]: Finished prepare-helm.service. Jul 15 11:25:20.673827 systemd-networkd[1043]: eth0: Gained IPv6LL Jul 15 11:25:20.675490 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:25:20.676445 systemd[1]: Reached target network-online.target. Jul 15 11:25:20.678527 systemd[1]: Starting kubelet.service... Jul 15 11:25:21.280499 systemd[1]: Started kubelet.service. Jul 15 11:25:21.698194 kubelet[1260]: E0715 11:25:21.698091 1260 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:25:21.700491 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:25:21.700620 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:25:22.913991 sshd_keygen[1215]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:25:22.931194 systemd[1]: Finished sshd-keygen.service. Jul 15 11:25:22.933166 systemd[1]: Starting issuegen.service... Jul 15 11:25:22.937574 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:25:22.937754 systemd[1]: Finished issuegen.service. Jul 15 11:25:22.939540 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:25:22.945631 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:25:22.947520 systemd[1]: Started getty@tty1.service. Jul 15 11:25:22.949431 systemd[1]: Started serial-getty@ttyAMA0.service. Jul 15 11:25:22.950328 systemd[1]: Reached target getty.target. Jul 15 11:25:22.950979 systemd[1]: Reached target multi-user.target. Jul 15 11:25:22.952634 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:25:22.958788 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:25:22.958925 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:25:22.959751 systemd[1]: Startup finished in 571ms (kernel) + 4.377s (initrd) + 6.009s (userspace) = 10.958s. Jul 15 11:25:25.364468 systemd[1]: Created slice system-sshd.slice. Jul 15 11:25:25.365529 systemd[1]: Started sshd@0-10.0.0.138:22-10.0.0.1:43016.service. Jul 15 11:25:25.460336 sshd[1282]: Accepted publickey for core from 10.0.0.1 port 43016 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:25.462516 sshd[1282]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:25.471272 systemd-logind[1204]: New session 1 of user core. Jul 15 11:25:25.472181 systemd[1]: Created slice user-500.slice. Jul 15 11:25:25.473258 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:25:25.481376 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:25:25.482597 systemd[1]: Starting user@500.service... Jul 15 11:25:25.485157 (systemd)[1285]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:25.544695 systemd[1285]: Queued start job for default target default.target. Jul 15 11:25:25.545137 systemd[1285]: Reached target paths.target. Jul 15 11:25:25.545169 systemd[1285]: Reached target sockets.target. Jul 15 11:25:25.545181 systemd[1285]: Reached target timers.target. Jul 15 11:25:25.545191 systemd[1285]: Reached target basic.target. Jul 15 11:25:25.545227 systemd[1285]: Reached target default.target. Jul 15 11:25:25.545250 systemd[1285]: Startup finished in 54ms. Jul 15 11:25:25.545442 systemd[1]: Started user@500.service. Jul 15 11:25:25.546372 systemd[1]: Started session-1.scope. Jul 15 11:25:25.596808 systemd[1]: Started sshd@1-10.0.0.138:22-10.0.0.1:43024.service. Jul 15 11:25:25.647886 sshd[1294]: Accepted publickey for core from 10.0.0.1 port 43024 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:25.649485 sshd[1294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:25.653207 systemd-logind[1204]: New session 2 of user core. Jul 15 11:25:25.653990 systemd[1]: Started session-2.scope. Jul 15 11:25:25.708388 sshd[1294]: pam_unix(sshd:session): session closed for user core Jul 15 11:25:25.711295 systemd[1]: Started sshd@2-10.0.0.138:22-10.0.0.1:43038.service. Jul 15 11:25:25.712989 systemd-logind[1204]: Session 2 logged out. Waiting for processes to exit. Jul 15 11:25:25.713178 systemd[1]: sshd@1-10.0.0.138:22-10.0.0.1:43024.service: Deactivated successfully. Jul 15 11:25:25.713815 systemd[1]: session-2.scope: Deactivated successfully. Jul 15 11:25:25.714479 systemd-logind[1204]: Removed session 2. Jul 15 11:25:25.754310 sshd[1299]: Accepted publickey for core from 10.0.0.1 port 43038 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:25.755376 sshd[1299]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:25.758217 systemd-logind[1204]: New session 3 of user core. Jul 15 11:25:25.758965 systemd[1]: Started session-3.scope. Jul 15 11:25:25.809743 sshd[1299]: pam_unix(sshd:session): session closed for user core Jul 15 11:25:25.813658 systemd[1]: Started sshd@3-10.0.0.138:22-10.0.0.1:43054.service. Jul 15 11:25:25.814165 systemd[1]: sshd@2-10.0.0.138:22-10.0.0.1:43038.service: Deactivated successfully. Jul 15 11:25:25.814941 systemd[1]: session-3.scope: Deactivated successfully. Jul 15 11:25:25.815449 systemd-logind[1204]: Session 3 logged out. Waiting for processes to exit. Jul 15 11:25:25.816431 systemd-logind[1204]: Removed session 3. Jul 15 11:25:25.858890 sshd[1305]: Accepted publickey for core from 10.0.0.1 port 43054 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:25.860085 sshd[1305]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:25.863338 systemd-logind[1204]: New session 4 of user core. Jul 15 11:25:25.864172 systemd[1]: Started session-4.scope. Jul 15 11:25:25.917222 sshd[1305]: pam_unix(sshd:session): session closed for user core Jul 15 11:25:25.920451 systemd[1]: Started sshd@4-10.0.0.138:22-10.0.0.1:43056.service. Jul 15 11:25:25.920959 systemd[1]: sshd@3-10.0.0.138:22-10.0.0.1:43054.service: Deactivated successfully. Jul 15 11:25:25.921558 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:25:25.926850 systemd-logind[1204]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:25:25.927594 systemd-logind[1204]: Removed session 4. Jul 15 11:25:25.964553 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 43056 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:25.965864 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:25.968588 systemd-logind[1204]: New session 5 of user core. Jul 15 11:25:25.969295 systemd[1]: Started session-5.scope. Jul 15 11:25:26.024214 sudo[1315]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:25:26.024447 sudo[1315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:25:26.036888 dbus-daemon[1192]: avc: received setenforce notice (enforcing=1) Jul 15 11:25:26.037876 sudo[1315]: pam_unix(sudo:session): session closed for user root Jul 15 11:25:26.039588 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 15 11:25:26.042070 systemd[1]: sshd@4-10.0.0.138:22-10.0.0.1:43056.service: Deactivated successfully. Jul 15 11:25:26.042677 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:25:26.043186 systemd-logind[1204]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:25:26.044213 systemd[1]: Started sshd@5-10.0.0.138:22-10.0.0.1:43062.service. Jul 15 11:25:26.044788 systemd-logind[1204]: Removed session 5. Jul 15 11:25:26.087415 sshd[1319]: Accepted publickey for core from 10.0.0.1 port 43062 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:26.088717 sshd[1319]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:26.091600 systemd-logind[1204]: New session 6 of user core. Jul 15 11:25:26.092322 systemd[1]: Started session-6.scope. Jul 15 11:25:26.143126 sudo[1323]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:25:26.143338 sudo[1323]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:25:26.145766 sudo[1323]: pam_unix(sudo:session): session closed for user root Jul 15 11:25:26.149691 sudo[1322]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:25:26.149917 sudo[1322]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:25:26.157518 systemd[1]: Stopping audit-rules.service... Jul 15 11:25:26.156000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:25:26.159049 kernel: kauditd_printk_skb: 141 callbacks suppressed Jul 15 11:25:26.159098 kernel: audit: type=1305 audit(1752578726.156:217): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:25:26.159336 auditctl[1326]: No rules Jul 15 11:25:26.159763 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:25:26.159909 systemd[1]: Stopped audit-rules.service. Jul 15 11:25:26.156000 audit[1326]: SYSCALL arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd46448a0 a2=420 a3=0 items=0 ppid=1 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.161166 systemd[1]: Starting audit-rules.service... Jul 15 11:25:26.162718 kernel: audit: type=1300 audit(1752578726.156:217): arch=c00000b7 syscall=206 success=yes exit=1056 a0=3 a1=ffffd46448a0 a2=420 a3=0 items=0 ppid=1 pid=1326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.162754 kernel: audit: type=1327 audit(1752578726.156:217): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:25:26.156000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:25:26.158000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.165224 kernel: audit: type=1131 audit(1752578726.158:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.175879 augenrules[1343]: No rules Jul 15 11:25:26.176860 systemd[1]: Finished audit-rules.service. Jul 15 11:25:26.176000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.178503 sudo[1322]: pam_unix(sudo:session): session closed for user root Jul 15 11:25:26.177000 audit[1322]: USER_END pid=1322 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.179738 sshd[1319]: pam_unix(sshd:session): session closed for user core Jul 15 11:25:26.181736 kernel: audit: type=1130 audit(1752578726.176:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.181789 kernel: audit: type=1106 audit(1752578726.177:220): pid=1322 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.181806 kernel: audit: type=1104 audit(1752578726.177:221): pid=1322 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.177000 audit[1322]: CRED_DISP pid=1322 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.184620 kernel: audit: type=1106 audit(1752578726.180:222): pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.180000 audit[1319]: USER_END pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.183740 systemd[1]: sshd@5-10.0.0.138:22-10.0.0.1:43062.service: Deactivated successfully. Jul 15 11:25:26.184337 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:25:26.186300 kernel: audit: type=1104 audit(1752578726.180:223): pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.180000 audit[1319]: CRED_DISP pid=1319 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.185778 systemd-logind[1204]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:25:26.186029 systemd[1]: Started sshd@6-10.0.0.138:22-10.0.0.1:43068.service. Jul 15 11:25:26.187259 systemd-logind[1204]: Removed session 6. Jul 15 11:25:26.187831 kernel: audit: type=1131 audit(1752578726.183:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.138:22-10.0.0.1:43062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.183000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.138:22-10.0.0.1:43062 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.185000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.138:22-10.0.0.1:43068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.226000 audit[1349]: USER_ACCT pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.228767 sshd[1349]: Accepted publickey for core from 10.0.0.1 port 43068 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:25:26.228000 audit[1349]: CRED_ACQ pid=1349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.228000 audit[1349]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc6bf1070 a2=3 a3=1 items=0 ppid=1 pid=1349 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.228000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:25:26.230042 sshd[1349]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:25:26.233278 systemd-logind[1204]: New session 7 of user core. Jul 15 11:25:26.233593 systemd[1]: Started session-7.scope. Jul 15 11:25:26.235000 audit[1349]: USER_START pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.236000 audit[1351]: CRED_ACQ pid=1351 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:25:26.285694 sudo[1352]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:25:26.284000 audit[1352]: USER_ACCT pid=1352 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.285000 audit[1352]: CRED_REFR pid=1352 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.285938 sudo[1352]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:25:26.286000 audit[1352]: USER_START pid=1352 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.343940 systemd[1]: Starting docker.service... Jul 15 11:25:26.426907 env[1364]: time="2025-07-15T11:25:26.426801898Z" level=info msg="Starting up" Jul 15 11:25:26.429234 env[1364]: time="2025-07-15T11:25:26.429200435Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:25:26.429234 env[1364]: time="2025-07-15T11:25:26.429221259Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:25:26.429327 env[1364]: time="2025-07-15T11:25:26.429241194Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:25:26.429327 env[1364]: time="2025-07-15T11:25:26.429251666Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:25:26.431210 env[1364]: time="2025-07-15T11:25:26.431188352Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:25:26.431293 env[1364]: time="2025-07-15T11:25:26.431278886Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:25:26.431351 env[1364]: time="2025-07-15T11:25:26.431336870Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:25:26.431401 env[1364]: time="2025-07-15T11:25:26.431389032Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:25:26.529081 env[1364]: time="2025-07-15T11:25:26.529035404Z" level=info msg="Loading containers: start." Jul 15 11:25:26.574000 audit[1398]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1398 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.574000 audit[1398]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=116 a0=3 a1=ffffe63d8810 a2=0 a3=1 items=0 ppid=1364 pid=1398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.574000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:25:26.576000 audit[1400]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1400 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.576000 audit[1400]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=124 a0=3 a1=fffffc87a710 a2=0 a3=1 items=0 ppid=1364 pid=1400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.576000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:25:26.578000 audit[1402]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.578000 audit[1402]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=ffffd448d530 a2=0 a3=1 items=0 ppid=1364 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.578000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:25:26.579000 audit[1404]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.579000 audit[1404]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=112 a0=3 a1=fffffb3b2320 a2=0 a3=1 items=0 ppid=1364 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.579000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:25:26.583000 audit[1406]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.583000 audit[1406]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffce63f7d0 a2=0 a3=1 items=0 ppid=1364 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.583000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:25:26.608000 audit[1411]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1411 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.608000 audit[1411]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffc6330340 a2=0 a3=1 items=0 ppid=1364 pid=1411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.608000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:25:26.614000 audit[1413]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.614000 audit[1413]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=fffff42bf190 a2=0 a3=1 items=0 ppid=1364 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.614000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:25:26.616000 audit[1415]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1415 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.616000 audit[1415]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=212 a0=3 a1=ffffc8a94910 a2=0 a3=1 items=0 ppid=1364 pid=1415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.616000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:25:26.617000 audit[1417]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1417 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.617000 audit[1417]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=308 a0=3 a1=ffffd93da980 a2=0 a3=1 items=0 ppid=1364 pid=1417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.617000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:25:26.623000 audit[1421]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1421 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.623000 audit[1421]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=216 a0=3 a1=fffff609c610 a2=0 a3=1 items=0 ppid=1364 pid=1421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.623000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:25:26.631000 audit[1422]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1422 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.631000 audit[1422]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffe9096810 a2=0 a3=1 items=0 ppid=1364 pid=1422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.631000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:25:26.640736 kernel: Initializing XFRM netlink socket Jul 15 11:25:26.663648 env[1364]: time="2025-07-15T11:25:26.663609324Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:25:26.678000 audit[1430]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.678000 audit[1430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=492 a0=3 a1=ffffecf5a3b0 a2=0 a3=1 items=0 ppid=1364 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.678000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:25:26.689000 audit[1433]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1433 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.689000 audit[1433]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=288 a0=3 a1=fffff160c920 a2=0 a3=1 items=0 ppid=1364 pid=1433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.689000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:25:26.692000 audit[1436]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.692000 audit[1436]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffa45e8a0 a2=0 a3=1 items=0 ppid=1364 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.692000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:25:26.694000 audit[1438]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.694000 audit[1438]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=376 a0=3 a1=fffffc63bfa0 a2=0 a3=1 items=0 ppid=1364 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.694000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:25:26.696000 audit[1440]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1440 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.696000 audit[1440]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=356 a0=3 a1=ffffd9357160 a2=0 a3=1 items=0 ppid=1364 pid=1440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.696000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:25:26.698000 audit[1442]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1442 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.698000 audit[1442]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=444 a0=3 a1=ffffcf4ecd70 a2=0 a3=1 items=0 ppid=1364 pid=1442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.698000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:25:26.699000 audit[1444]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1444 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.699000 audit[1444]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=304 a0=3 a1=ffffc6260d80 a2=0 a3=1 items=0 ppid=1364 pid=1444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.699000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:25:26.706000 audit[1447]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.706000 audit[1447]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=508 a0=3 a1=ffffd68ee6e0 a2=0 a3=1 items=0 ppid=1364 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.706000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:25:26.708000 audit[1449]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1449 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.708000 audit[1449]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=240 a0=3 a1=fffffcf76060 a2=0 a3=1 items=0 ppid=1364 pid=1449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.708000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:25:26.709000 audit[1451]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1451 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.709000 audit[1451]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=428 a0=3 a1=ffffee89f9a0 a2=0 a3=1 items=0 ppid=1364 pid=1451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.709000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:25:26.711000 audit[1453]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1453 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.711000 audit[1453]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffd9b42a20 a2=0 a3=1 items=0 ppid=1364 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.711000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:25:26.713766 systemd-networkd[1043]: docker0: Link UP Jul 15 11:25:26.720000 audit[1457]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1457 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.720000 audit[1457]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffcb0811a0 a2=0 a3=1 items=0 ppid=1364 pid=1457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.720000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:25:26.728000 audit[1458]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1458 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:26.728000 audit[1458]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=224 a0=3 a1=ffffd403cf60 a2=0 a3=1 items=0 ppid=1364 pid=1458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:26.728000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:25:26.729933 env[1364]: time="2025-07-15T11:25:26.729884190Z" level=info msg="Loading containers: done." Jul 15 11:25:26.747451 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3925277933-merged.mount: Deactivated successfully. Jul 15 11:25:26.753678 env[1364]: time="2025-07-15T11:25:26.753634182Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:25:26.753864 env[1364]: time="2025-07-15T11:25:26.753832476Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:25:26.753954 env[1364]: time="2025-07-15T11:25:26.753929278Z" level=info msg="Daemon has completed initialization" Jul 15 11:25:26.768873 systemd[1]: Started docker.service. Jul 15 11:25:26.768000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:26.776322 env[1364]: time="2025-07-15T11:25:26.776209167Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:25:27.340652 env[1217]: time="2025-07-15T11:25:27.340601903Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 15 11:25:28.306558 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount762240153.mount: Deactivated successfully. Jul 15 11:25:29.571133 env[1217]: time="2025-07-15T11:25:29.571078851Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:29.572518 env[1217]: time="2025-07-15T11:25:29.572486678Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:29.576030 env[1217]: time="2025-07-15T11:25:29.576000586Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:29.577499 env[1217]: time="2025-07-15T11:25:29.577469939Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:29.578415 env[1217]: time="2025-07-15T11:25:29.578389594Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:4ee56e04a4dd8fbc5a022e324327ae1f9b19bdaab8a79644d85d29b70d28e87a\"" Jul 15 11:25:29.579099 env[1217]: time="2025-07-15T11:25:29.579069152Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 15 11:25:31.018352 env[1217]: time="2025-07-15T11:25:31.018306839Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:31.019760 env[1217]: time="2025-07-15T11:25:31.019733597Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:31.021962 env[1217]: time="2025-07-15T11:25:31.021930791Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:31.023975 env[1217]: time="2025-07-15T11:25:31.023949796Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:31.024656 env[1217]: time="2025-07-15T11:25:31.024627437Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:3451c4b5bd601398c65e0579f1b720df4e0edde78f7f38e142f2b0be5e9bd038\"" Jul 15 11:25:31.025896 env[1217]: time="2025-07-15T11:25:31.025863979Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 15 11:25:31.951386 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:25:31.950000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:31.951609 systemd[1]: Stopped kubelet.service. Jul 15 11:25:31.953029 systemd[1]: Starting kubelet.service... Jul 15 11:25:31.953935 kernel: kauditd_printk_skb: 84 callbacks suppressed Jul 15 11:25:31.953996 kernel: audit: type=1130 audit(1752578731.950:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:31.954022 kernel: audit: type=1131 audit(1752578731.950:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:31.950000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:32.050253 systemd[1]: Started kubelet.service. Jul 15 11:25:32.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:32.052723 kernel: audit: type=1130 audit(1752578732.049:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:32.094516 kubelet[1501]: E0715 11:25:32.094466 1501 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:25:32.097222 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:25:32.097349 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:25:32.096000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:25:32.099710 kernel: audit: type=1131 audit(1752578732.096:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:25:32.332962 env[1217]: time="2025-07-15T11:25:32.332848954Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:32.334639 env[1217]: time="2025-07-15T11:25:32.334602395Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:32.337120 env[1217]: time="2025-07-15T11:25:32.337084657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:32.339494 env[1217]: time="2025-07-15T11:25:32.339454333Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:32.340273 env[1217]: time="2025-07-15T11:25:32.340229942Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:3d72026a3748f31411df93e4aaa9c67944b7e0cc311c11eba2aae5e615213d5f\"" Jul 15 11:25:32.341462 env[1217]: time="2025-07-15T11:25:32.341437932Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 15 11:25:33.411373 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount312454962.mount: Deactivated successfully. Jul 15 11:25:33.978399 env[1217]: time="2025-07-15T11:25:33.978351857Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:33.980267 env[1217]: time="2025-07-15T11:25:33.980231052Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:33.981716 env[1217]: time="2025-07-15T11:25:33.981665074Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:33.983262 env[1217]: time="2025-07-15T11:25:33.983229650Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:33.983788 env[1217]: time="2025-07-15T11:25:33.983748457Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:e29293ef7b817bb7b03ce7484edafe6ca0a7087e54074e7d7dcd3bd3c762eee9\"" Jul 15 11:25:33.984554 env[1217]: time="2025-07-15T11:25:33.984529541Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:25:34.626763 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3798638022.mount: Deactivated successfully. Jul 15 11:25:35.535911 env[1217]: time="2025-07-15T11:25:35.535862218Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:35.537672 env[1217]: time="2025-07-15T11:25:35.537635601Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:35.539613 env[1217]: time="2025-07-15T11:25:35.539585679Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:35.542522 env[1217]: time="2025-07-15T11:25:35.542488143Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:35.543250 env[1217]: time="2025-07-15T11:25:35.543215394Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:2f6c962e7b8311337352d9fdea917da2184d9919f4da7695bc2a6517cf392fe4\"" Jul 15 11:25:35.543824 env[1217]: time="2025-07-15T11:25:35.543796329Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:25:36.009882 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1438536756.mount: Deactivated successfully. Jul 15 11:25:36.012954 env[1217]: time="2025-07-15T11:25:36.012915406Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:36.014074 env[1217]: time="2025-07-15T11:25:36.014038933Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:36.015597 env[1217]: time="2025-07-15T11:25:36.015554138Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:36.017297 env[1217]: time="2025-07-15T11:25:36.017264781Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:36.017730 env[1217]: time="2025-07-15T11:25:36.017685341Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:afb61768ce381961ca0beff95337601f29dc70ff3ed14e5e4b3e5699057e6aa8\"" Jul 15 11:25:36.018215 env[1217]: time="2025-07-15T11:25:36.018182801Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 15 11:25:36.526677 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1700367814.mount: Deactivated successfully. Jul 15 11:25:38.587918 env[1217]: time="2025-07-15T11:25:38.587863209Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:38.589891 env[1217]: time="2025-07-15T11:25:38.589863102Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:38.591682 env[1217]: time="2025-07-15T11:25:38.591656023Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:38.594033 env[1217]: time="2025-07-15T11:25:38.594002234Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:38.594883 env[1217]: time="2025-07-15T11:25:38.594855179Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:7fc9d4aa817aa6a3e549f3cd49d1f7b496407be979fc36dd5f356d59ce8c3a82\"" Jul 15 11:25:42.348080 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:25:42.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:42.348238 systemd[1]: Stopped kubelet.service. Jul 15 11:25:42.349554 systemd[1]: Starting kubelet.service... Jul 15 11:25:42.347000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:42.351658 kernel: audit: type=1130 audit(1752578742.347:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:42.351725 kernel: audit: type=1131 audit(1752578742.347:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:42.441502 systemd[1]: Started kubelet.service. Jul 15 11:25:42.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:42.443710 kernel: audit: type=1130 audit(1752578742.441:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:42.484831 kubelet[1535]: E0715 11:25:42.484798 1535 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:25:42.486542 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:25:42.486663 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:25:42.486000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:25:42.488707 kernel: audit: type=1131 audit(1752578742.486:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:25:44.252056 systemd[1]: Stopped kubelet.service. Jul 15 11:25:44.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.251000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.253980 systemd[1]: Starting kubelet.service... Jul 15 11:25:44.255699 kernel: audit: type=1130 audit(1752578744.251:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.255768 kernel: audit: type=1131 audit(1752578744.251:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.277496 systemd[1]: Reloading. Jul 15 11:25:44.326725 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-07-15T11:25:44Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:25:44.326751 /usr/lib/systemd/system-generators/torcx-generator[1569]: time="2025-07-15T11:25:44Z" level=info msg="torcx already run" Jul 15 11:25:44.443921 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:25:44.443936 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:25:44.458853 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509595 kernel: audit: type=1400 audit(1752578744.505:269): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509678 kernel: audit: type=1400 audit(1752578744.505:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509718 kernel: audit: type=1400 audit(1752578744.505:271): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.511214 kernel: audit: type=1400 audit(1752578744.505:272): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.505000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit: BPF prog-id=46 op=LOAD Jul 15 11:25:44.507000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.507000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.508000 audit: BPF prog-id=47 op=LOAD Jul 15 11:25:44.508000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.509000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.510000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.510000 audit: BPF prog-id=48 op=LOAD Jul 15 11:25:44.510000 audit: BPF prog-id=39 op=UNLOAD Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit: BPF prog-id=49 op=LOAD Jul 15 11:25:44.513000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit: BPF prog-id=50 op=LOAD Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit: BPF prog-id=51 op=LOAD Jul 15 11:25:44.513000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:25:44.513000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit: BPF prog-id=52 op=LOAD Jul 15 11:25:44.513000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.513000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit: BPF prog-id=53 op=LOAD Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit: BPF prog-id=54 op=LOAD Jul 15 11:25:44.514000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:25:44.514000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit: BPF prog-id=55 op=LOAD Jul 15 11:25:44.514000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit: BPF prog-id=56 op=LOAD Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.514000 audit: BPF prog-id=57 op=LOAD Jul 15 11:25:44.514000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:25:44.514000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit: BPF prog-id=58 op=LOAD Jul 15 11:25:44.515000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit: BPF prog-id=59 op=LOAD Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:44.515000 audit: BPF prog-id=60 op=LOAD Jul 15 11:25:44.515000 audit: BPF prog-id=42 op=UNLOAD Jul 15 11:25:44.515000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:25:44.524353 systemd[1]: Started kubelet.service. Jul 15 11:25:44.524000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.527772 systemd[1]: Stopping kubelet.service... Jul 15 11:25:44.528401 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:25:44.528639 systemd[1]: Stopped kubelet.service. Jul 15 11:25:44.528000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.530222 systemd[1]: Starting kubelet.service... Jul 15 11:25:44.621964 systemd[1]: Started kubelet.service. Jul 15 11:25:44.621000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:44.655984 kubelet[1618]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:25:44.655984 kubelet[1618]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:25:44.655984 kubelet[1618]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:25:44.656274 kubelet[1618]: I0715 11:25:44.656074 1618 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:25:45.369820 kubelet[1618]: I0715 11:25:45.369788 1618 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 15 11:25:45.369820 kubelet[1618]: I0715 11:25:45.369813 1618 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:25:45.370058 kubelet[1618]: I0715 11:25:45.370033 1618 server.go:954] "Client rotation is on, will bootstrap in background" Jul 15 11:25:45.407991 kubelet[1618]: E0715 11:25:45.407958 1618 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.138:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:45.408916 kubelet[1618]: I0715 11:25:45.408894 1618 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:25:45.419446 kubelet[1618]: E0715 11:25:45.419422 1618 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:25:45.419546 kubelet[1618]: I0715 11:25:45.419533 1618 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:25:45.422825 kubelet[1618]: I0715 11:25:45.422807 1618 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:25:45.423569 kubelet[1618]: I0715 11:25:45.423541 1618 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:25:45.423818 kubelet[1618]: I0715 11:25:45.423643 1618 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:25:45.424017 kubelet[1618]: I0715 11:25:45.424005 1618 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:25:45.424072 kubelet[1618]: I0715 11:25:45.424064 1618 container_manager_linux.go:304] "Creating device plugin manager" Jul 15 11:25:45.424292 kubelet[1618]: I0715 11:25:45.424281 1618 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:25:45.426882 kubelet[1618]: I0715 11:25:45.426867 1618 kubelet.go:446] "Attempting to sync node with API server" Jul 15 11:25:45.427046 kubelet[1618]: I0715 11:25:45.427033 1618 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:25:45.427468 kubelet[1618]: I0715 11:25:45.427454 1618 kubelet.go:352] "Adding apiserver pod source" Jul 15 11:25:45.427974 kubelet[1618]: I0715 11:25:45.427952 1618 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:25:45.437748 kubelet[1618]: W0715 11:25:45.437681 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.138:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:45.437866 kubelet[1618]: E0715 11:25:45.437848 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.138:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:45.438194 kubelet[1618]: W0715 11:25:45.438158 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.138:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:45.438232 kubelet[1618]: E0715 11:25:45.438206 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.138:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:45.442059 kubelet[1618]: I0715 11:25:45.442041 1618 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:25:45.442971 kubelet[1618]: I0715 11:25:45.442948 1618 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:25:45.443083 kubelet[1618]: W0715 11:25:45.443065 1618 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:25:45.443818 kubelet[1618]: I0715 11:25:45.443804 1618 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:25:45.443878 kubelet[1618]: I0715 11:25:45.443829 1618 server.go:1287] "Started kubelet" Jul 15 11:25:45.443977 kubelet[1618]: I0715 11:25:45.443949 1618 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:25:45.444750 kubelet[1618]: I0715 11:25:45.444734 1618 server.go:479] "Adding debug handlers to kubelet server" Jul 15 11:25:45.447418 kubelet[1618]: E0715 11:25:45.447400 1618 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:25:45.450000 audit[1618]: AVC avc: denied { mac_admin } for pid=1618 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:45.450000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:25:45.450000 audit[1618]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000abe8d0 a1=4000a65368 a2=4000abe8a0 a3=25 items=0 ppid=1 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.450000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:25:45.450000 audit[1618]: AVC avc: denied { mac_admin } for pid=1618 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:45.450000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:25:45.450000 audit[1618]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000a63e20 a1=4000a65380 a2=4000abe960 a3=25 items=0 ppid=1 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.450000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:25:45.451601 kubelet[1618]: I0715 11:25:45.451329 1618 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:25:45.451601 kubelet[1618]: I0715 11:25:45.451381 1618 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:25:45.451601 kubelet[1618]: I0715 11:25:45.451446 1618 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:25:45.451850 kubelet[1618]: I0715 11:25:45.451799 1618 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:25:45.452098 kubelet[1618]: I0715 11:25:45.452085 1618 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:25:45.452290 kubelet[1618]: I0715 11:25:45.452276 1618 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:25:45.454206 kubelet[1618]: E0715 11:25:45.453588 1618 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:25:45.454339 kubelet[1618]: I0715 11:25:45.453659 1618 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:25:45.454525 kubelet[1618]: I0715 11:25:45.453668 1618 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:25:45.454897 kubelet[1618]: W0715 11:25:45.453929 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.138:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:45.455030 kubelet[1618]: E0715 11:25:45.455014 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.138:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:45.455097 kubelet[1618]: E0715 11:25:45.454724 1618 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="200ms" Jul 15 11:25:45.455158 kubelet[1618]: I0715 11:25:45.454788 1618 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:25:45.455215 kubelet[1618]: E0715 11:25:45.454454 1618 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.138:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.138:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.185269155b1411b7 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:25:45.443815863 +0000 UTC m=+0.818438689,LastTimestamp:2025-07-15 11:25:45.443815863 +0000 UTC m=+0.818438689,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:25:45.455385 kubelet[1618]: I0715 11:25:45.455373 1618 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:25:45.454000 audit[1631]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1631 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.454000 audit[1631]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=fffffd7466c0 a2=0 a3=1 items=0 ppid=1618 pid=1631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.454000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:25:45.455659 kubelet[1618]: I0715 11:25:45.455506 1618 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:25:45.456748 kubelet[1618]: I0715 11:25:45.456725 1618 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:25:45.461000 audit[1632]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.461000 audit[1632]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffdabf7ff0 a2=0 a3=1 items=0 ppid=1618 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.461000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:25:45.463000 audit[1637]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1637 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.463000 audit[1637]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffde71a8c0 a2=0 a3=1 items=0 ppid=1618 pid=1637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.463000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:25:45.465000 audit[1641]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.465000 audit[1641]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=312 a0=3 a1=ffffcf2e3340 a2=0 a3=1 items=0 ppid=1618 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.465000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:25:45.466303 kubelet[1618]: I0715 11:25:45.466291 1618 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:25:45.466372 kubelet[1618]: I0715 11:25:45.466362 1618 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:25:45.466424 kubelet[1618]: I0715 11:25:45.466417 1618 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:25:45.554779 kubelet[1618]: E0715 11:25:45.554740 1618 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:25:45.558190 kubelet[1618]: I0715 11:25:45.558173 1618 policy_none.go:49] "None policy: Start" Jul 15 11:25:45.558272 kubelet[1618]: I0715 11:25:45.558261 1618 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:25:45.558363 kubelet[1618]: I0715 11:25:45.558353 1618 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:25:45.563661 systemd[1]: Created slice kubepods.slice. Jul 15 11:25:45.563000 audit[1645]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1645 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.563000 audit[1645]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=924 a0=3 a1=ffffff5c8270 a2=0 a3=1 items=0 ppid=1618 pid=1645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.563000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:25:45.565584 kubelet[1618]: I0715 11:25:45.565532 1618 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:25:45.565000 audit[1646]: NETFILTER_CFG table=mangle:31 family=2 entries=1 op=nft_register_chain pid=1646 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.565000 audit[1646]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffdf930190 a2=0 a3=1 items=0 ppid=1618 pid=1646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.565000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:25:45.566000 audit[1647]: NETFILTER_CFG table=mangle:32 family=10 entries=2 op=nft_register_chain pid=1647 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:45.566000 audit[1647]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffce85f7a0 a2=0 a3=1 items=0 ppid=1618 pid=1647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.566000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:25:45.566000 audit[1648]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1648 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.566000 audit[1648]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd073f9b0 a2=0 a3=1 items=0 ppid=1618 pid=1648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.566000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:25:45.567927 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:25:45.568283 kubelet[1618]: I0715 11:25:45.567568 1618 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:25:45.568283 kubelet[1618]: I0715 11:25:45.567597 1618 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 15 11:25:45.568283 kubelet[1618]: I0715 11:25:45.567629 1618 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:25:45.568283 kubelet[1618]: I0715 11:25:45.567636 1618 kubelet.go:2382] "Starting kubelet main sync loop" Jul 15 11:25:45.567000 audit[1649]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1649 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:45.567000 audit[1649]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffeb79b840 a2=0 a3=1 items=0 ppid=1618 pid=1649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.567000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:25:45.568786 kubelet[1618]: E0715 11:25:45.568525 1618 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:25:45.568786 kubelet[1618]: W0715 11:25:45.568519 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.138:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:45.568786 kubelet[1618]: E0715 11:25:45.568561 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.138:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:45.569000 audit[1650]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1650 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:45.569000 audit[1650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffca66b830 a2=0 a3=1 items=0 ppid=1618 pid=1650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:25:45.570318 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:25:45.569000 audit[1652]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1652 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:45.569000 audit[1652]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=128 a0=3 a1=fffff39ac0c0 a2=0 a3=1 items=0 ppid=1618 pid=1652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.569000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:25:45.570000 audit[1653]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1653 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:45.570000 audit[1653]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=136 a0=3 a1=ffffed8af8a0 a2=0 a3=1 items=0 ppid=1618 pid=1653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:25:45.585000 audit[1618]: AVC avc: denied { mac_admin } for pid=1618 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:45.585000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:25:45.585000 audit[1618]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000965140 a1=4000eccc60 a2=4000965110 a3=25 items=0 ppid=1 pid=1618 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:45.585000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:25:45.586610 kubelet[1618]: I0715 11:25:45.586365 1618 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:25:45.586610 kubelet[1618]: I0715 11:25:45.586411 1618 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:25:45.586610 kubelet[1618]: I0715 11:25:45.586496 1618 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:25:45.586610 kubelet[1618]: I0715 11:25:45.586507 1618 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:25:45.587266 kubelet[1618]: I0715 11:25:45.586888 1618 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:25:45.587590 kubelet[1618]: E0715 11:25:45.587564 1618 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:25:45.587651 kubelet[1618]: E0715 11:25:45.587603 1618 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:25:45.655813 kubelet[1618]: E0715 11:25:45.655729 1618 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="400ms" Jul 15 11:25:45.674491 systemd[1]: Created slice kubepods-burstable-pod476756ec20a1f73f1441968d500aefda.slice. Jul 15 11:25:45.687744 kubelet[1618]: I0715 11:25:45.687721 1618 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:25:45.688026 kubelet[1618]: E0715 11:25:45.688009 1618 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.138:6443/api/v1/nodes\": dial tcp 10.0.0.138:6443: connect: connection refused" node="localhost" Jul 15 11:25:45.693670 kubelet[1618]: E0715 11:25:45.693643 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:45.695951 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 15 11:25:45.697414 kubelet[1618]: E0715 11:25:45.697392 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:45.699209 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 15 11:25:45.700346 kubelet[1618]: E0715 11:25:45.700328 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:45.756770 kubelet[1618]: I0715 11:25:45.756746 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/476756ec20a1f73f1441968d500aefda-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"476756ec20a1f73f1441968d500aefda\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:45.756878 kubelet[1618]: I0715 11:25:45.756865 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/476756ec20a1f73f1441968d500aefda-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"476756ec20a1f73f1441968d500aefda\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:45.756945 kubelet[1618]: I0715 11:25:45.756933 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:45.757009 kubelet[1618]: I0715 11:25:45.756997 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:45.757099 kubelet[1618]: I0715 11:25:45.757086 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:45.757173 kubelet[1618]: I0715 11:25:45.757159 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/476756ec20a1f73f1441968d500aefda-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"476756ec20a1f73f1441968d500aefda\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:45.757239 kubelet[1618]: I0715 11:25:45.757227 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:45.757324 kubelet[1618]: I0715 11:25:45.757311 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:45.757396 kubelet[1618]: I0715 11:25:45.757384 1618 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:45.889800 kubelet[1618]: I0715 11:25:45.889761 1618 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:25:45.890107 kubelet[1618]: E0715 11:25:45.890062 1618 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.138:6443/api/v1/nodes\": dial tcp 10.0.0.138:6443: connect: connection refused" node="localhost" Jul 15 11:25:45.994641 kubelet[1618]: E0715 11:25:45.994594 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:45.995624 env[1217]: time="2025-07-15T11:25:45.995279648Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:476756ec20a1f73f1441968d500aefda,Namespace:kube-system,Attempt:0,}" Jul 15 11:25:45.998434 kubelet[1618]: E0715 11:25:45.998399 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:45.999186 env[1217]: time="2025-07-15T11:25:45.998922820Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 15 11:25:46.001022 kubelet[1618]: E0715 11:25:46.001007 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:46.001302 env[1217]: time="2025-07-15T11:25:46.001268878Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 15 11:25:46.056474 kubelet[1618]: E0715 11:25:46.056406 1618 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="800ms" Jul 15 11:25:46.291738 kubelet[1618]: I0715 11:25:46.291643 1618 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:25:46.292245 kubelet[1618]: E0715 11:25:46.292195 1618 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.138:6443/api/v1/nodes\": dial tcp 10.0.0.138:6443: connect: connection refused" node="localhost" Jul 15 11:25:46.378345 kubelet[1618]: W0715 11:25:46.378286 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.138:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:46.378445 kubelet[1618]: E0715 11:25:46.378350 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.138:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:46.574984 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount852369769.mount: Deactivated successfully. Jul 15 11:25:46.577929 env[1217]: time="2025-07-15T11:25:46.577893093Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.579649 env[1217]: time="2025-07-15T11:25:46.579616029Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.581400 env[1217]: time="2025-07-15T11:25:46.581361783Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.582785 env[1217]: time="2025-07-15T11:25:46.582752149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.585301 env[1217]: time="2025-07-15T11:25:46.585269723Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.586908 env[1217]: time="2025-07-15T11:25:46.586876412Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.588249 env[1217]: time="2025-07-15T11:25:46.588208775Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:7d46a07936af93fcce097459055f93ab07331509aa55f4a2a90d95a3ace1850e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.589579 env[1217]: time="2025-07-15T11:25:46.589551305Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.592572 env[1217]: time="2025-07-15T11:25:46.592538393Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.593520 env[1217]: time="2025-07-15T11:25:46.593493551Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.595071 env[1217]: time="2025-07-15T11:25:46.595045679Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.596526 env[1217]: time="2025-07-15T11:25:46.596504657Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621089957Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621123022Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621132989Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621299835Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7b148997a24b506a310457e2a60e63bd2d16253ade5528034f113d5a6774cbcb pid=1672 runtime=io.containerd.runc.v2 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621077267Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621109211Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621118979Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:25:46.621487 env[1217]: time="2025-07-15T11:25:46.621328937Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/479438e48d70eff49b7cad95db0eb82d961c4daa30afb79d4ef222f0c9469ea4 pid=1671 runtime=io.containerd.runc.v2 Jul 15 11:25:46.622116 env[1217]: time="2025-07-15T11:25:46.622067012Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:25:46.622116 env[1217]: time="2025-07-15T11:25:46.622096474Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:25:46.622116 env[1217]: time="2025-07-15T11:25:46.622105841Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:25:46.622236 env[1217]: time="2025-07-15T11:25:46.622205876Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6254673d333888e9080575ab79805c613517cebdf9ddfa81f7485d1328606de0 pid=1681 runtime=io.containerd.runc.v2 Jul 15 11:25:46.639360 systemd[1]: Started cri-containerd-479438e48d70eff49b7cad95db0eb82d961c4daa30afb79d4ef222f0c9469ea4.scope. Jul 15 11:25:46.646112 systemd[1]: Started cri-containerd-6254673d333888e9080575ab79805c613517cebdf9ddfa81f7485d1328606de0.scope. Jul 15 11:25:46.648742 systemd[1]: Started cri-containerd-7b148997a24b506a310457e2a60e63bd2d16253ade5528034f113d5a6774cbcb.scope. Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.674000 audit: BPF prog-id=61 op=LOAD Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=1671 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393433386534386437306566663439623763616439356462306562 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=1671 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393433386534386437306566663439623763616439356462306562 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.675000 audit: BPF prog-id=62 op=LOAD Jul 15 11:25:46.675000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=1671 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393433386534386437306566663439623763616439356462306562 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit: BPF prog-id=63 op=LOAD Jul 15 11:25:46.676000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=1671 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393433386534386437306566663439623763616439356462306562 Jul 15 11:25:46.676000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:25:46.676000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.676000 audit: BPF prog-id=64 op=LOAD Jul 15 11:25:46.676000 audit[1702]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=1671 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.676000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3437393433386534386437306566663439623763616439356462306562 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.679000 audit: BPF prog-id=65 op=LOAD Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353436373364333333383838653930383035373561623739383035 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353436373364333333383838653930383035373561623739383035 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit: BPF prog-id=66 op=LOAD Jul 15 11:25:46.680000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353436373364333333383838653930383035373561623739383035 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit: BPF prog-id=67 op=LOAD Jul 15 11:25:46.680000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353436373364333333383838653930383035373561623739383035 Jul 15 11:25:46.680000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:25:46.680000 audit: BPF prog-id=66 op=UNLOAD Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { perfmon } for pid=1703 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit[1703]: AVC avc: denied { bpf } for pid=1703 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.680000 audit: BPF prog-id=68 op=LOAD Jul 15 11:25:46.680000 audit[1703]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1681 pid=1703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.680000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3632353436373364333333383838653930383035373561623739383035 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.686000 audit: BPF prog-id=69 op=LOAD Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1672 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762313438393937613234623530366133313034353765326136306536 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1672 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762313438393937613234623530366133313034353765326136306536 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit: BPF prog-id=70 op=LOAD Jul 15 11:25:46.687000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1672 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762313438393937613234623530366133313034353765326136306536 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit: BPF prog-id=71 op=LOAD Jul 15 11:25:46.687000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1672 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762313438393937613234623530366133313034353765326136306536 Jul 15 11:25:46.687000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:25:46.687000 audit: BPF prog-id=70 op=UNLOAD Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { perfmon } for pid=1701 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit[1701]: AVC avc: denied { bpf } for pid=1701 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.687000 audit: BPF prog-id=72 op=LOAD Jul 15 11:25:46.687000 audit[1701]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1672 pid=1701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.687000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762313438393937613234623530366133313034353765326136306536 Jul 15 11:25:46.702422 env[1217]: time="2025-07-15T11:25:46.702385929Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"479438e48d70eff49b7cad95db0eb82d961c4daa30afb79d4ef222f0c9469ea4\"" Jul 15 11:25:46.706499 env[1217]: time="2025-07-15T11:25:46.706468081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:476756ec20a1f73f1441968d500aefda,Namespace:kube-system,Attempt:0,} returns sandbox id \"6254673d333888e9080575ab79805c613517cebdf9ddfa81f7485d1328606de0\"" Jul 15 11:25:46.706575 kubelet[1618]: E0715 11:25:46.706496 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:46.707171 kubelet[1618]: E0715 11:25:46.707140 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:46.708104 env[1217]: time="2025-07-15T11:25:46.708078693Z" level=info msg="CreateContainer within sandbox \"479438e48d70eff49b7cad95db0eb82d961c4daa30afb79d4ef222f0c9469ea4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:25:46.709188 env[1217]: time="2025-07-15T11:25:46.709162428Z" level=info msg="CreateContainer within sandbox \"6254673d333888e9080575ab79805c613517cebdf9ddfa81f7485d1328606de0\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:25:46.712758 env[1217]: time="2025-07-15T11:25:46.712729512Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"7b148997a24b506a310457e2a60e63bd2d16253ade5528034f113d5a6774cbcb\"" Jul 15 11:25:46.713208 kubelet[1618]: E0715 11:25:46.713191 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:46.715342 env[1217]: time="2025-07-15T11:25:46.715316499Z" level=info msg="CreateContainer within sandbox \"7b148997a24b506a310457e2a60e63bd2d16253ade5528034f113d5a6774cbcb\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:25:46.723859 env[1217]: time="2025-07-15T11:25:46.723827223Z" level=info msg="CreateContainer within sandbox \"479438e48d70eff49b7cad95db0eb82d961c4daa30afb79d4ef222f0c9469ea4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"fd737f50cb18bd6c7c366c111e16efb3a5b8bbc9b4375899ad8ce5bb976922c8\"" Jul 15 11:25:46.724461 env[1217]: time="2025-07-15T11:25:46.724435080Z" level=info msg="StartContainer for \"fd737f50cb18bd6c7c366c111e16efb3a5b8bbc9b4375899ad8ce5bb976922c8\"" Jul 15 11:25:46.726062 env[1217]: time="2025-07-15T11:25:46.726028039Z" level=info msg="CreateContainer within sandbox \"6254673d333888e9080575ab79805c613517cebdf9ddfa81f7485d1328606de0\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"76a6e04d8db8f32a46a9de744c914d79959c61fef5a6b71accb9e44710b46445\"" Jul 15 11:25:46.726422 env[1217]: time="2025-07-15T11:25:46.726397997Z" level=info msg="StartContainer for \"76a6e04d8db8f32a46a9de744c914d79959c61fef5a6b71accb9e44710b46445\"" Jul 15 11:25:46.727915 env[1217]: time="2025-07-15T11:25:46.727877551Z" level=info msg="CreateContainer within sandbox \"7b148997a24b506a310457e2a60e63bd2d16253ade5528034f113d5a6774cbcb\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"e94b3ad895f56067ca6218594c5418a9a99a3c0c5567f70591b0bdff7bf93739\"" Jul 15 11:25:46.728241 env[1217]: time="2025-07-15T11:25:46.728213563Z" level=info msg="StartContainer for \"e94b3ad895f56067ca6218594c5418a9a99a3c0c5567f70591b0bdff7bf93739\"" Jul 15 11:25:46.743430 systemd[1]: Started cri-containerd-76a6e04d8db8f32a46a9de744c914d79959c61fef5a6b71accb9e44710b46445.scope. Jul 15 11:25:46.744212 systemd[1]: Started cri-containerd-fd737f50cb18bd6c7c366c111e16efb3a5b8bbc9b4375899ad8ce5bb976922c8.scope. Jul 15 11:25:46.751058 systemd[1]: Started cri-containerd-e94b3ad895f56067ca6218594c5418a9a99a3c0c5567f70591b0bdff7bf93739.scope. Jul 15 11:25:46.770570 kubelet[1618]: W0715 11:25:46.770521 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.138:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:46.770662 kubelet[1618]: E0715 11:25:46.770578 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.138:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit: BPF prog-id=73 op=LOAD Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=1672 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539346233616438393566353630363763613632313835393463353431 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=1672 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539346233616438393566353630363763613632313835393463353431 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.774000 audit: BPF prog-id=74 op=LOAD Jul 15 11:25:46.774000 audit[1804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=1672 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.774000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539346233616438393566353630363763613632313835393463353431 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit: BPF prog-id=75 op=LOAD Jul 15 11:25:46.775000 audit[1804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=1672 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539346233616438393566353630363763613632313835393463353431 Jul 15 11:25:46.775000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:25:46.775000 audit: BPF prog-id=74 op=UNLOAD Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { perfmon } for pid=1804 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit[1804]: AVC avc: denied { bpf } for pid=1804 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.775000 audit: BPF prog-id=76 op=LOAD Jul 15 11:25:46.775000 audit[1804]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=1672 pid=1804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6539346233616438393566353630363763613632313835393463353431 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.776000 audit: BPF prog-id=77 op=LOAD Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1681 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736613665303464386462386633326134366139646537343463393134 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1681 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736613665303464386462386633326134366139646537343463393134 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit: BPF prog-id=78 op=LOAD Jul 15 11:25:46.777000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1681 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736613665303464386462386633326134366139646537343463393134 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit: BPF prog-id=79 op=LOAD Jul 15 11:25:46.777000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1681 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736613665303464386462386633326134366139646537343463393134 Jul 15 11:25:46.777000 audit: BPF prog-id=79 op=UNLOAD Jul 15 11:25:46.777000 audit: BPF prog-id=78 op=UNLOAD Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { perfmon } for pid=1803 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit[1803]: AVC avc: denied { bpf } for pid=1803 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.777000 audit: BPF prog-id=80 op=LOAD Jul 15 11:25:46.777000 audit[1803]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1681 pid=1803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.777000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736613665303464386462386633326134366139646537343463393134 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit: BPF prog-id=81 op=LOAD Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=1671 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373337663530636231386264366337633336366331313165313665 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=1671 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373337663530636231386264366337633336366331313165313665 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit: BPF prog-id=82 op=LOAD Jul 15 11:25:46.785000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=1671 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373337663530636231386264366337633336366331313165313665 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.785000 audit: BPF prog-id=83 op=LOAD Jul 15 11:25:46.785000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=1671 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.785000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373337663530636231386264366337633336366331313165313665 Jul 15 11:25:46.786000 audit: BPF prog-id=83 op=UNLOAD Jul 15 11:25:46.786000 audit: BPF prog-id=82 op=UNLOAD Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { perfmon } for pid=1802 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit[1802]: AVC avc: denied { bpf } for pid=1802 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:46.786000 audit: BPF prog-id=84 op=LOAD Jul 15 11:25:46.786000 audit[1802]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=1671 pid=1802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:46.786000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6664373337663530636231386264366337633336366331313165313665 Jul 15 11:25:46.799825 kubelet[1618]: W0715 11:25:46.797632 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.138:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:46.799825 kubelet[1618]: E0715 11:25:46.797777 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.138:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:46.799928 env[1217]: time="2025-07-15T11:25:46.798293296Z" level=info msg="StartContainer for \"e94b3ad895f56067ca6218594c5418a9a99a3c0c5567f70591b0bdff7bf93739\" returns successfully" Jul 15 11:25:46.849054 env[1217]: time="2025-07-15T11:25:46.845493572Z" level=info msg="StartContainer for \"fd737f50cb18bd6c7c366c111e16efb3a5b8bbc9b4375899ad8ce5bb976922c8\" returns successfully" Jul 15 11:25:46.856101 env[1217]: time="2025-07-15T11:25:46.856060123Z" level=info msg="StartContainer for \"76a6e04d8db8f32a46a9de744c914d79959c61fef5a6b71accb9e44710b46445\" returns successfully" Jul 15 11:25:46.857361 kubelet[1618]: E0715 11:25:46.857324 1618 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.138:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.138:6443: connect: connection refused" interval="1.6s" Jul 15 11:25:46.904440 kubelet[1618]: W0715 11:25:46.904351 1618 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.138:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.138:6443: connect: connection refused Jul 15 11:25:46.904440 kubelet[1618]: E0715 11:25:46.904413 1618 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.138:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.138:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:25:47.094166 kubelet[1618]: I0715 11:25:47.094132 1618 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:25:47.575839 kubelet[1618]: E0715 11:25:47.575809 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:47.575948 kubelet[1618]: E0715 11:25:47.575930 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:47.577400 kubelet[1618]: E0715 11:25:47.577378 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:47.577487 kubelet[1618]: E0715 11:25:47.577471 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:47.578798 kubelet[1618]: E0715 11:25:47.578776 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:47.578879 kubelet[1618]: E0715 11:25:47.578863 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:48.579000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.580913 kubelet[1618]: E0715 11:25:48.580880 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:48.581174 kubelet[1618]: E0715 11:25:48.581008 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:48.581261 kubelet[1618]: E0715 11:25:48.581230 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:48.581343 kubelet[1618]: E0715 11:25:48.581326 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:48.583756 kernel: kauditd_printk_skb: 561 callbacks suppressed Jul 15 11:25:48.583827 kernel: audit: type=1400 audit(1752578748.579:567): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.583849 kernel: audit: type=1300 audit(1752578748.579:567): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40006d8000 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:48.579000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40006d8000 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:48.579000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:48.591454 kernel: audit: type=1327 audit(1752578748.579:567): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:48.591506 kernel: audit: type=1400 audit(1752578748.579:568): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.579000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.579000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40001ceae0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:48.598239 kernel: audit: type=1300 audit(1752578748.579:568): arch=c00000b7 syscall=27 success=no exit=-13 a0=6 a1=40001ceae0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:48.598297 kernel: audit: type=1327 audit(1752578748.579:568): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:48.579000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:48.965000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.965000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40037d8d20 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:48.970955 kubelet[1618]: E0715 11:25:48.970783 1618 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:25:48.970955 kubelet[1618]: E0715 11:25:48.970909 1618 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:48.972076 kernel: audit: type=1400 audit(1752578748.965:569): avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.972111 kernel: audit: type=1300 audit(1752578748.965:569): arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40037d8d20 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:48.972127 kernel: audit: type=1327 audit(1752578748.965:569): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:48.965000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:48.965000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.976426 kernel: audit: type=1400 audit(1752578748.965:570): avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.965000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=3f a1=40037d8de0 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:48.965000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:48.973000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7312 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.973000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=41 a1=40037d9230 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:48.973000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:48.973000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:48.973000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=40 a1=40067b1520 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:48.973000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:49.030000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:49.030000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=4005753260 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:49.030000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:49.030000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:49.030000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=43 a1=40033f50e0 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:25:49.030000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:25:49.061039 kubelet[1618]: E0715 11:25:49.061003 1618 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 15 11:25:49.139403 kubelet[1618]: I0715 11:25:49.139362 1618 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:25:49.155062 kubelet[1618]: I0715 11:25:49.154992 1618 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:49.210960 kubelet[1618]: E0715 11:25:49.210874 1618 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:49.210960 kubelet[1618]: I0715 11:25:49.210945 1618 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:49.212387 kubelet[1618]: E0715 11:25:49.212367 1618 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:49.212436 kubelet[1618]: I0715 11:25:49.212389 1618 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:49.213820 kubelet[1618]: E0715 11:25:49.213790 1618 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:49.430859 kubelet[1618]: I0715 11:25:49.430159 1618 apiserver.go:52] "Watching apiserver" Jul 15 11:25:49.455780 kubelet[1618]: I0715 11:25:49.455753 1618 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:25:51.087082 systemd[1]: Reloading. Jul 15 11:25:51.142606 /usr/lib/systemd/system-generators/torcx-generator[1918]: time="2025-07-15T11:25:51Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:25:51.142638 /usr/lib/systemd/system-generators/torcx-generator[1918]: time="2025-07-15T11:25:51Z" level=info msg="torcx already run" Jul 15 11:25:51.230151 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:25:51.230167 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:25:51.245155 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.300000 audit: BPF prog-id=85 op=LOAD Jul 15 11:25:51.300000 audit: BPF prog-id=69 op=UNLOAD Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.301000 audit: BPF prog-id=86 op=LOAD Jul 15 11:25:51.301000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit: BPF prog-id=87 op=LOAD Jul 15 11:25:51.302000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.302000 audit: BPF prog-id=88 op=LOAD Jul 15 11:25:51.302000 audit: BPF prog-id=61 op=UNLOAD Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit: BPF prog-id=89 op=LOAD Jul 15 11:25:51.303000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.303000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit: BPF prog-id=90 op=LOAD Jul 15 11:25:51.304000 audit: BPF prog-id=65 op=UNLOAD Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.304000 audit: BPF prog-id=91 op=LOAD Jul 15 11:25:51.304000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.305000 audit: BPF prog-id=92 op=LOAD Jul 15 11:25:51.305000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit: BPF prog-id=93 op=LOAD Jul 15 11:25:51.308000 audit: BPF prog-id=81 op=UNLOAD Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit: BPF prog-id=94 op=LOAD Jul 15 11:25:51.308000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit: BPF prog-id=95 op=LOAD Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.308000 audit: BPF prog-id=96 op=LOAD Jul 15 11:25:51.308000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:25:51.308000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit: BPF prog-id=97 op=LOAD Jul 15 11:25:51.309000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit: BPF prog-id=98 op=LOAD Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit: BPF prog-id=99 op=LOAD Jul 15 11:25:51.309000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:25:51.309000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.309000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit: BPF prog-id=100 op=LOAD Jul 15 11:25:51.310000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit: BPF prog-id=101 op=LOAD Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit: BPF prog-id=102 op=LOAD Jul 15 11:25:51.310000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:25:51.310000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.310000 audit: BPF prog-id=103 op=LOAD Jul 15 11:25:51.310000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit: BPF prog-id=104 op=LOAD Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.311000 audit: BPF prog-id=105 op=LOAD Jul 15 11:25:51.311000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:25:51.311000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:25:51.322290 systemd[1]: Stopping kubelet.service... Jul 15 11:25:51.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:51.350965 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:25:51.351424 systemd[1]: Stopped kubelet.service. Jul 15 11:25:51.351599 systemd[1]: kubelet.service: Consumed 1.163s CPU time. Jul 15 11:25:51.354664 systemd[1]: Starting kubelet.service... Jul 15 11:25:51.446506 systemd[1]: Started kubelet.service. Jul 15 11:25:51.445000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:25:51.485204 kubelet[1958]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:25:51.485204 kubelet[1958]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:25:51.485204 kubelet[1958]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:25:51.485504 kubelet[1958]: I0715 11:25:51.485252 1958 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:25:51.494091 kubelet[1958]: I0715 11:25:51.494067 1958 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 15 11:25:51.494230 kubelet[1958]: I0715 11:25:51.494220 1958 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:25:51.494515 kubelet[1958]: I0715 11:25:51.494501 1958 server.go:954] "Client rotation is on, will bootstrap in background" Jul 15 11:25:51.497324 kubelet[1958]: I0715 11:25:51.497282 1958 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:25:51.499807 kubelet[1958]: I0715 11:25:51.499786 1958 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:25:51.502609 kubelet[1958]: E0715 11:25:51.502584 1958 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:25:51.502726 kubelet[1958]: I0715 11:25:51.502714 1958 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:25:51.504970 kubelet[1958]: I0715 11:25:51.504956 1958 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:25:51.505242 kubelet[1958]: I0715 11:25:51.505219 1958 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:25:51.505442 kubelet[1958]: I0715 11:25:51.505298 1958 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:25:51.505581 kubelet[1958]: I0715 11:25:51.505568 1958 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:25:51.505649 kubelet[1958]: I0715 11:25:51.505640 1958 container_manager_linux.go:304] "Creating device plugin manager" Jul 15 11:25:51.505750 kubelet[1958]: I0715 11:25:51.505741 1958 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:25:51.505917 kubelet[1958]: I0715 11:25:51.505908 1958 kubelet.go:446] "Attempting to sync node with API server" Jul 15 11:25:51.506751 kubelet[1958]: I0715 11:25:51.506737 1958 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:25:51.506856 kubelet[1958]: I0715 11:25:51.506848 1958 kubelet.go:352] "Adding apiserver pod source" Jul 15 11:25:51.513062 kubelet[1958]: I0715 11:25:51.513042 1958 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:25:51.513638 kubelet[1958]: I0715 11:25:51.513622 1958 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:25:51.514971 kubelet[1958]: I0715 11:25:51.514954 1958 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:25:51.515387 kubelet[1958]: I0715 11:25:51.515373 1958 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:25:51.515474 kubelet[1958]: I0715 11:25:51.515465 1958 server.go:1287] "Started kubelet" Jul 15 11:25:51.515000 audit[1958]: AVC avc: denied { mac_admin } for pid=1958 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.515000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:25:51.515000 audit[1958]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bed9e0 a1=4000b2ee40 a2=4000bed9b0 a3=25 items=0 ppid=1 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:51.515000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:25:51.517220 kubelet[1958]: I0715 11:25:51.517202 1958 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:25:51.515000 audit[1958]: AVC avc: denied { mac_admin } for pid=1958 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.515000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:25:51.515000 audit[1958]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=4000bef4a0 a1=4000b2ee58 a2=4000beda70 a3=25 items=0 ppid=1 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:51.515000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:25:51.517433 kubelet[1958]: I0715 11:25:51.517357 1958 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:25:51.517497 kubelet[1958]: I0715 11:25:51.517484 1958 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:25:51.517586 kubelet[1958]: I0715 11:25:51.517576 1958 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:25:51.517656 kubelet[1958]: I0715 11:25:51.517632 1958 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:25:51.517726 kubelet[1958]: I0715 11:25:51.517688 1958 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:25:51.518561 kubelet[1958]: I0715 11:25:51.518524 1958 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:25:51.518815 kubelet[1958]: I0715 11:25:51.518772 1958 server.go:479] "Adding debug handlers to kubelet server" Jul 15 11:25:51.524705 kubelet[1958]: E0715 11:25:51.524665 1958 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:25:51.528293 kubelet[1958]: I0715 11:25:51.528103 1958 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:25:51.528366 kubelet[1958]: I0715 11:25:51.528339 1958 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:25:51.528613 kubelet[1958]: I0715 11:25:51.528574 1958 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:25:51.530092 kubelet[1958]: I0715 11:25:51.530070 1958 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:25:51.530092 kubelet[1958]: I0715 11:25:51.530224 1958 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:25:51.531971 kubelet[1958]: I0715 11:25:51.531945 1958 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:25:51.548401 kubelet[1958]: I0715 11:25:51.548374 1958 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:25:51.549624 kubelet[1958]: I0715 11:25:51.549606 1958 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:25:51.549757 kubelet[1958]: I0715 11:25:51.549745 1958 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 15 11:25:51.549839 kubelet[1958]: I0715 11:25:51.549824 1958 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:25:51.549891 kubelet[1958]: I0715 11:25:51.549883 1958 kubelet.go:2382] "Starting kubelet main sync loop" Jul 15 11:25:51.549982 kubelet[1958]: E0715 11:25:51.549967 1958 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:25:51.565708 kubelet[1958]: I0715 11:25:51.565680 1958 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:25:51.565708 kubelet[1958]: I0715 11:25:51.565703 1958 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:25:51.565809 kubelet[1958]: I0715 11:25:51.565720 1958 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:25:51.565847 kubelet[1958]: I0715 11:25:51.565834 1958 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:25:51.565877 kubelet[1958]: I0715 11:25:51.565847 1958 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:25:51.565877 kubelet[1958]: I0715 11:25:51.565867 1958 policy_none.go:49] "None policy: Start" Jul 15 11:25:51.565877 kubelet[1958]: I0715 11:25:51.565875 1958 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:25:51.565940 kubelet[1958]: I0715 11:25:51.565883 1958 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:25:51.565979 kubelet[1958]: I0715 11:25:51.565969 1958 state_mem.go:75] "Updated machine memory state" Jul 15 11:25:51.568832 kubelet[1958]: I0715 11:25:51.568816 1958 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:25:51.567000 audit[1958]: AVC avc: denied { mac_admin } for pid=1958 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:51.567000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:25:51.567000 audit[1958]: SYSCALL arch=c00000b7 syscall=5 success=no exit=-22 a0=40009aa390 a1=4000b9aac8 a2=40009aa360 a3=25 items=0 ppid=1 pid=1958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:51.567000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:25:51.569643 kubelet[1958]: I0715 11:25:51.569621 1958 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:25:51.569856 kubelet[1958]: I0715 11:25:51.569841 1958 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:25:51.569950 kubelet[1958]: I0715 11:25:51.569917 1958 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:25:51.571447 kubelet[1958]: I0715 11:25:51.571410 1958 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:25:51.571524 kubelet[1958]: E0715 11:25:51.571499 1958 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:25:51.651155 kubelet[1958]: I0715 11:25:51.651078 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:51.651557 kubelet[1958]: I0715 11:25:51.651543 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:51.651862 kubelet[1958]: I0715 11:25:51.651848 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:51.674764 kubelet[1958]: I0715 11:25:51.674749 1958 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:25:51.682020 kubelet[1958]: I0715 11:25:51.682002 1958 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 15 11:25:51.682164 kubelet[1958]: I0715 11:25:51.682154 1958 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:25:51.829546 kubelet[1958]: I0715 11:25:51.829517 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/476756ec20a1f73f1441968d500aefda-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"476756ec20a1f73f1441968d500aefda\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:51.829725 kubelet[1958]: I0715 11:25:51.829553 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:51.829725 kubelet[1958]: I0715 11:25:51.829581 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:51.829725 kubelet[1958]: I0715 11:25:51.829603 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:51.829725 kubelet[1958]: I0715 11:25:51.829626 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:51.829725 kubelet[1958]: I0715 11:25:51.829668 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/476756ec20a1f73f1441968d500aefda-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"476756ec20a1f73f1441968d500aefda\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:51.829893 kubelet[1958]: I0715 11:25:51.829729 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/476756ec20a1f73f1441968d500aefda-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"476756ec20a1f73f1441968d500aefda\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:51.829893 kubelet[1958]: I0715 11:25:51.829755 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:51.829893 kubelet[1958]: I0715 11:25:51.829776 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:25:51.956331 kubelet[1958]: E0715 11:25:51.956296 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:51.956441 kubelet[1958]: E0715 11:25:51.956418 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:51.957394 kubelet[1958]: E0715 11:25:51.957354 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:52.434000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:52.434000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c0b120 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:52.434000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:52.434000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:52.434000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c0b140 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:52.434000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:52.434000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:52.434000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000c89f80 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:52.434000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:52.435000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:25:52.435000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000b19220 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:52.435000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:52.513561 kubelet[1958]: I0715 11:25:52.513529 1958 apiserver.go:52] "Watching apiserver" Jul 15 11:25:52.529328 kubelet[1958]: I0715 11:25:52.529298 1958 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:25:52.557794 kubelet[1958]: E0715 11:25:52.557765 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:52.558306 kubelet[1958]: I0715 11:25:52.558285 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:52.558449 kubelet[1958]: I0715 11:25:52.558430 1958 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:52.563734 kubelet[1958]: E0715 11:25:52.563700 1958 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:25:52.563844 kubelet[1958]: E0715 11:25:52.563828 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:52.565236 kubelet[1958]: E0715 11:25:52.565216 1958 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 15 11:25:52.565421 kubelet[1958]: E0715 11:25:52.565407 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:52.580418 kubelet[1958]: I0715 11:25:52.580375 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.580347149 podStartE2EDuration="1.580347149s" podCreationTimestamp="2025-07-15 11:25:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:25:52.579998018 +0000 UTC m=+1.128361922" watchObservedRunningTime="2025-07-15 11:25:52.580347149 +0000 UTC m=+1.128711053" Jul 15 11:25:52.595302 kubelet[1958]: I0715 11:25:52.595252 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.595238362 podStartE2EDuration="1.595238362s" podCreationTimestamp="2025-07-15 11:25:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:25:52.588561823 +0000 UTC m=+1.136925727" watchObservedRunningTime="2025-07-15 11:25:52.595238362 +0000 UTC m=+1.143602266" Jul 15 11:25:52.601955 kubelet[1958]: I0715 11:25:52.601892 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.601882649 podStartE2EDuration="1.601882649s" podCreationTimestamp="2025-07-15 11:25:51 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:25:52.595513105 +0000 UTC m=+1.143877049" watchObservedRunningTime="2025-07-15 11:25:52.601882649 +0000 UTC m=+1.150246553" Jul 15 11:25:53.558459 kubelet[1958]: E0715 11:25:53.558414 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:53.558756 kubelet[1958]: E0715 11:25:53.558484 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:54.559677 kubelet[1958]: E0715 11:25:54.559647 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:55.168214 kubelet[1958]: E0715 11:25:55.168187 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:56.671000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:25:56.674492 kernel: kauditd_printk_skb: 284 callbacks suppressed Jul 15 11:25:56.674569 kernel: audit: type=1400 audit(1752578756.671:828): avc: denied { watch } for pid=1838 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7337 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:25:56.674595 kernel: audit: type=1300 audit(1752578756.671:828): arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000f18840 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:56.671000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=8 a1=4000f18840 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:25:56.677245 kernel: audit: type=1327 audit(1752578756.671:828): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:56.671000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:25:57.079132 kubelet[1958]: I0715 11:25:57.079109 1958 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:25:57.079815 env[1217]: time="2025-07-15T11:25:57.079733801Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:25:57.080051 kubelet[1958]: I0715 11:25:57.079895 1958 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:25:57.388083 kubelet[1958]: W0715 11:25:57.388000 1958 reflector.go:569] object-"kube-system"/"kube-proxy": failed to list *v1.ConfigMap: configmaps "kube-proxy" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "kube-system": no relationship found between node 'localhost' and this object Jul 15 11:25:57.388083 kubelet[1958]: E0715 11:25:57.388039 1958 reflector.go:166] "Unhandled Error" err="object-\"kube-system\"/\"kube-proxy\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-proxy\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"kube-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 15 11:25:57.390672 systemd[1]: Created slice kubepods-besteffort-pod05ab6ab6_89b3_495d_a41c_2dfd1873ad21.slice. Jul 15 11:25:57.462616 kubelet[1958]: I0715 11:25:57.462586 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-kube-proxy\") pod \"kube-proxy-dzzrp\" (UID: \"05ab6ab6-89b3-495d-a41c-2dfd1873ad21\") " pod="kube-system/kube-proxy-dzzrp" Jul 15 11:25:57.462730 kubelet[1958]: I0715 11:25:57.462622 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-lib-modules\") pod \"kube-proxy-dzzrp\" (UID: \"05ab6ab6-89b3-495d-a41c-2dfd1873ad21\") " pod="kube-system/kube-proxy-dzzrp" Jul 15 11:25:57.462730 kubelet[1958]: I0715 11:25:57.462641 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-xtables-lock\") pod \"kube-proxy-dzzrp\" (UID: \"05ab6ab6-89b3-495d-a41c-2dfd1873ad21\") " pod="kube-system/kube-proxy-dzzrp" Jul 15 11:25:57.462730 kubelet[1958]: I0715 11:25:57.462657 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-58zgf\" (UniqueName: \"kubernetes.io/projected/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-kube-api-access-58zgf\") pod \"kube-proxy-dzzrp\" (UID: \"05ab6ab6-89b3-495d-a41c-2dfd1873ad21\") " pod="kube-system/kube-proxy-dzzrp" Jul 15 11:25:57.569860 kubelet[1958]: E0715 11:25:57.569839 1958 projected.go:288] Couldn't get configMap kube-system/kube-root-ca.crt: configmap "kube-root-ca.crt" not found Jul 15 11:25:57.569951 kubelet[1958]: E0715 11:25:57.569940 1958 projected.go:194] Error preparing data for projected volume kube-api-access-58zgf for pod kube-system/kube-proxy-dzzrp: configmap "kube-root-ca.crt" not found Jul 15 11:25:57.570067 kubelet[1958]: E0715 11:25:57.570056 1958 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-kube-api-access-58zgf podName:05ab6ab6-89b3-495d-a41c-2dfd1873ad21 nodeName:}" failed. No retries permitted until 2025-07-15 11:25:58.070035655 +0000 UTC m=+6.618399559 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-58zgf" (UniqueName: "kubernetes.io/projected/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-kube-api-access-58zgf") pod "kube-proxy-dzzrp" (UID: "05ab6ab6-89b3-495d-a41c-2dfd1873ad21") : configmap "kube-root-ca.crt" not found Jul 15 11:25:58.116100 systemd[1]: Created slice kubepods-besteffort-poda33d0131_424d_40aa_a257_3596deafc7fa.slice. Jul 15 11:25:58.165804 kubelet[1958]: I0715 11:25:58.165776 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/a33d0131-424d-40aa-a257-3596deafc7fa-var-lib-calico\") pod \"tigera-operator-747864d56d-kctp7\" (UID: \"a33d0131-424d-40aa-a257-3596deafc7fa\") " pod="tigera-operator/tigera-operator-747864d56d-kctp7" Jul 15 11:25:58.166087 kubelet[1958]: I0715 11:25:58.165824 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-49wz5\" (UniqueName: \"kubernetes.io/projected/a33d0131-424d-40aa-a257-3596deafc7fa-kube-api-access-49wz5\") pod \"tigera-operator-747864d56d-kctp7\" (UID: \"a33d0131-424d-40aa-a257-3596deafc7fa\") " pod="tigera-operator/tigera-operator-747864d56d-kctp7" Jul 15 11:25:58.166172 kubelet[1958]: I0715 11:25:58.166148 1958 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:25:58.419355 env[1217]: time="2025-07-15T11:25:58.419258563Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-kctp7,Uid:a33d0131-424d-40aa-a257-3596deafc7fa,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:25:58.434472 env[1217]: time="2025-07-15T11:25:58.434412474Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:25:58.434921 env[1217]: time="2025-07-15T11:25:58.434454404Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:25:58.434921 env[1217]: time="2025-07-15T11:25:58.434464367Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:25:58.434921 env[1217]: time="2025-07-15T11:25:58.434585396Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec pid=2016 runtime=io.containerd.runc.v2 Jul 15 11:25:58.446234 systemd[1]: Started cri-containerd-da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec.scope. Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.468919 kernel: audit: type=1400 audit(1752578758.464:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.468971 kernel: audit: type=1400 audit(1752578758.464:830): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.468992 kernel: audit: type=1400 audit(1752578758.464:831): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470642 kernel: audit: type=1400 audit(1752578758.464:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474135 kernel: audit: type=1400 audit(1752578758.464:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474183 kernel: audit: type=1400 audit(1752578758.464:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.475857 kernel: audit: type=1400 audit(1752578758.464:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.464000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.467000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.467000 audit: BPF prog-id=106 op=LOAD Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2016 pid=2028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:58.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366337653837663866653665373736343466623062323164633862 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2016 pid=2028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:58.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366337653837663866653665373736343466623062323164633862 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.470000 audit: BPF prog-id=107 op=LOAD Jul 15 11:25:58.470000 audit[2028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2016 pid=2028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:58.470000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366337653837663866653665373736343466623062323164633862 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.472000 audit: BPF prog-id=108 op=LOAD Jul 15 11:25:58.472000 audit[2028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2016 pid=2028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:58.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366337653837663866653665373736343466623062323164633862 Jul 15 11:25:58.474000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:25:58.474000 audit: BPF prog-id=107 op=UNLOAD Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { perfmon } for pid=2028 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit[2028]: AVC avc: denied { bpf } for pid=2028 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:58.474000 audit: BPF prog-id=109 op=LOAD Jul 15 11:25:58.474000 audit[2028]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2016 pid=2028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:58.474000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6461366337653837663866653665373736343466623062323164633862 Jul 15 11:25:58.494602 env[1217]: time="2025-07-15T11:25:58.494563762Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-kctp7,Uid:a33d0131-424d-40aa-a257-3596deafc7fa,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec\"" Jul 15 11:25:58.496043 env[1217]: time="2025-07-15T11:25:58.495995196Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:25:58.564304 kubelet[1958]: E0715 11:25:58.564276 1958 configmap.go:193] Couldn't get configMap kube-system/kube-proxy: failed to sync configmap cache: timed out waiting for the condition Jul 15 11:25:58.564439 kubelet[1958]: E0715 11:25:58.564340 1958 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-kube-proxy podName:05ab6ab6-89b3-495d-a41c-2dfd1873ad21 nodeName:}" failed. No retries permitted until 2025-07-15 11:25:59.064322588 +0000 UTC m=+7.612686492 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-proxy" (UniqueName: "kubernetes.io/configmap/05ab6ab6-89b3-495d-a41c-2dfd1873ad21-kube-proxy") pod "kube-proxy-dzzrp" (UID: "05ab6ab6-89b3-495d-a41c-2dfd1873ad21") : failed to sync configmap cache: timed out waiting for the condition Jul 15 11:25:59.203353 kubelet[1958]: E0715 11:25:59.203326 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:59.204165 env[1217]: time="2025-07-15T11:25:59.204114818Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dzzrp,Uid:05ab6ab6-89b3-495d-a41c-2dfd1873ad21,Namespace:kube-system,Attempt:0,}" Jul 15 11:25:59.227637 env[1217]: time="2025-07-15T11:25:59.227570714Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:25:59.227728 env[1217]: time="2025-07-15T11:25:59.227641050Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:25:59.227728 env[1217]: time="2025-07-15T11:25:59.227667857Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:25:59.227913 env[1217]: time="2025-07-15T11:25:59.227860542Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0bcb69c92c41fd1806ef349759b2b549080ba6f525f715c8443f0906672fb790 pid=2058 runtime=io.containerd.runc.v2 Jul 15 11:25:59.239818 systemd[1]: run-containerd-runc-k8s.io-0bcb69c92c41fd1806ef349759b2b549080ba6f525f715c8443f0906672fb790-runc.doHRLN.mount: Deactivated successfully. Jul 15 11:25:59.242161 systemd[1]: Started cri-containerd-0bcb69c92c41fd1806ef349759b2b549080ba6f525f715c8443f0906672fb790.scope. Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.259000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit: BPF prog-id=110 op=LOAD Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=2058 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062636236396339326334316664313830366566333439373539623262 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=2058 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062636236396339326334316664313830366566333439373539623262 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit: BPF prog-id=111 op=LOAD Jul 15 11:25:59.260000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=2058 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062636236396339326334316664313830366566333439373539623262 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit: BPF prog-id=112 op=LOAD Jul 15 11:25:59.260000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=2058 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062636236396339326334316664313830366566333439373539623262 Jul 15 11:25:59.260000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:25:59.260000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { perfmon } for pid=2067 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit[2067]: AVC avc: denied { bpf } for pid=2067 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.260000 audit: BPF prog-id=113 op=LOAD Jul 15 11:25:59.260000 audit[2067]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=2058 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3062636236396339326334316664313830366566333439373539623262 Jul 15 11:25:59.271135 env[1217]: time="2025-07-15T11:25:59.271089311Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-dzzrp,Uid:05ab6ab6-89b3-495d-a41c-2dfd1873ad21,Namespace:kube-system,Attempt:0,} returns sandbox id \"0bcb69c92c41fd1806ef349759b2b549080ba6f525f715c8443f0906672fb790\"" Jul 15 11:25:59.271682 kubelet[1958]: E0715 11:25:59.271660 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:59.278731 env[1217]: time="2025-07-15T11:25:59.278632279Z" level=info msg="CreateContainer within sandbox \"0bcb69c92c41fd1806ef349759b2b549080ba6f525f715c8443f0906672fb790\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:25:59.293004 env[1217]: time="2025-07-15T11:25:59.292955995Z" level=info msg="CreateContainer within sandbox \"0bcb69c92c41fd1806ef349759b2b549080ba6f525f715c8443f0906672fb790\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"0c5d32d95f52855588d503f83f0b3b13678aa807804a8d42e853b6c761298e54\"" Jul 15 11:25:59.293763 env[1217]: time="2025-07-15T11:25:59.293718174Z" level=info msg="StartContainer for \"0c5d32d95f52855588d503f83f0b3b13678aa807804a8d42e853b6c761298e54\"" Jul 15 11:25:59.307339 systemd[1]: Started cri-containerd-0c5d32d95f52855588d503f83f0b3b13678aa807804a8d42e853b6c761298e54.scope. Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2058 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063356433326439356635323835353538386435303366383366306233 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit: BPF prog-id=114 op=LOAD Jul 15 11:25:59.329000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2058 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063356433326439356635323835353538386435303366383366306233 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit: BPF prog-id=115 op=LOAD Jul 15 11:25:59.329000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2058 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063356433326439356635323835353538386435303366383366306233 Jul 15 11:25:59.329000 audit: BPF prog-id=115 op=UNLOAD Jul 15 11:25:59.329000 audit: BPF prog-id=114 op=UNLOAD Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:25:59.329000 audit: BPF prog-id=116 op=LOAD Jul 15 11:25:59.329000 audit[2099]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2058 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063356433326439356635323835353538386435303366383366306233 Jul 15 11:25:59.342814 env[1217]: time="2025-07-15T11:25:59.342774309Z" level=info msg="StartContainer for \"0c5d32d95f52855588d503f83f0b3b13678aa807804a8d42e853b6c761298e54\" returns successfully" Jul 15 11:25:59.543000 audit[2159]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2159 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.543000 audit[2159]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=fffff9442d70 a2=0 a3=1 items=0 ppid=2109 pid=2159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.543000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:25:59.544000 audit[2160]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2160 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.544000 audit[2160]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc8ecfa00 a2=0 a3=1 items=0 ppid=2109 pid=2160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.544000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:25:59.549000 audit[2161]: NETFILTER_CFG table=mangle:40 family=10 entries=1 op=nft_register_chain pid=2161 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.549000 audit[2161]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffd8e5cd30 a2=0 a3=1 items=0 ppid=2109 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.549000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:25:59.550000 audit[2162]: NETFILTER_CFG table=nat:41 family=10 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.550000 audit[2162]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc0b7b590 a2=0 a3=1 items=0 ppid=2109 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.550000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:25:59.552000 audit[2163]: NETFILTER_CFG table=filter:42 family=2 entries=1 op=nft_register_chain pid=2163 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.552000 audit[2163]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffc0709a80 a2=0 a3=1 items=0 ppid=2109 pid=2163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.552000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:25:59.553000 audit[2164]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2164 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.553000 audit[2164]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffcbc1edc0 a2=0 a3=1 items=0 ppid=2109 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.553000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:25:59.570063 kubelet[1958]: E0715 11:25:59.569485 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:25:59.646000 audit[2165]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.646000 audit[2165]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffcfd164d0 a2=0 a3=1 items=0 ppid=2109 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.646000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:25:59.650000 audit[2167]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.650000 audit[2167]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffeba5b1b0 a2=0 a3=1 items=0 ppid=2109 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.650000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:25:59.653000 audit[2170]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.653000 audit[2170]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=752 a0=3 a1=ffffd0bccff0 a2=0 a3=1 items=0 ppid=2109 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.653000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:25:59.654000 audit[2171]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.654000 audit[2171]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffe1b1e2a0 a2=0 a3=1 items=0 ppid=2109 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.654000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:25:59.656000 audit[2173]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.656000 audit[2173]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffceef0d00 a2=0 a3=1 items=0 ppid=2109 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:25:59.657000 audit[2174]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.657000 audit[2174]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea03a7e0 a2=0 a3=1 items=0 ppid=2109 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:25:59.660000 audit[2176]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.660000 audit[2176]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffff976a40 a2=0 a3=1 items=0 ppid=2109 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.660000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:25:59.663000 audit[2179]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.663000 audit[2179]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffdba157a0 a2=0 a3=1 items=0 ppid=2109 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.663000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:25:59.664000 audit[2180]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2180 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.664000 audit[2180]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcca85ac0 a2=0 a3=1 items=0 ppid=2109 pid=2180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.664000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:25:59.666000 audit[2182]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.666000 audit[2182]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffde859db0 a2=0 a3=1 items=0 ppid=2109 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.666000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:25:59.667000 audit[2183]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.667000 audit[2183]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffe0647e80 a2=0 a3=1 items=0 ppid=2109 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.667000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:25:59.669000 audit[2185]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.669000 audit[2185]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffe01b4400 a2=0 a3=1 items=0 ppid=2109 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.669000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:25:59.672000 audit[2188]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.672000 audit[2188]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffdbfde0f0 a2=0 a3=1 items=0 ppid=2109 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.672000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:25:59.676000 audit[2191]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.676000 audit[2191]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=fffff0966740 a2=0 a3=1 items=0 ppid=2109 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.676000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:25:59.677000 audit[2192]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2192 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.677000 audit[2192]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffc689a5d0 a2=0 a3=1 items=0 ppid=2109 pid=2192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.677000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:25:59.679000 audit[2194]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2194 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.679000 audit[2194]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=524 a0=3 a1=ffffe7be35c0 a2=0 a3=1 items=0 ppid=2109 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.679000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:25:59.682000 audit[2197]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.682000 audit[2197]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=fffff0a01ff0 a2=0 a3=1 items=0 ppid=2109 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.682000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:25:59.683000 audit[2198]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2198 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.683000 audit[2198]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffcb252d50 a2=0 a3=1 items=0 ppid=2109 pid=2198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.683000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:25:59.685000 audit[2200]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2200 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:25:59.685000 audit[2200]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=532 a0=3 a1=ffffcabbf720 a2=0 a3=1 items=0 ppid=2109 pid=2200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.685000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:25:59.706000 audit[2206]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:25:59.706000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffebd39790 a2=0 a3=1 items=0 ppid=2109 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.706000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:25:59.717000 audit[2206]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2206 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:25:59.717000 audit[2206]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5508 a0=3 a1=ffffebd39790 a2=0 a3=1 items=0 ppid=2109 pid=2206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.717000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:25:59.719000 audit[2211]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.719000 audit[2211]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=108 a0=3 a1=ffffde7d8fe0 a2=0 a3=1 items=0 ppid=2109 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.719000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:25:59.721000 audit[2213]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.721000 audit[2213]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffffc7a7e60 a2=0 a3=1 items=0 ppid=2109 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.721000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:25:59.724000 audit[2216]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.724000 audit[2216]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=836 a0=3 a1=fffff51aba70 a2=0 a3=1 items=0 ppid=2109 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.724000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:25:59.725000 audit[2217]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.725000 audit[2217]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffea214780 a2=0 a3=1 items=0 ppid=2109 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.725000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:25:59.727000 audit[2219]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.727000 audit[2219]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd120d980 a2=0 a3=1 items=0 ppid=2109 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.727000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:25:59.729000 audit[2220]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.729000 audit[2220]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffd74c5260 a2=0 a3=1 items=0 ppid=2109 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.729000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:25:59.731000 audit[2222]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.731000 audit[2222]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=744 a0=3 a1=ffffec6eeff0 a2=0 a3=1 items=0 ppid=2109 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.731000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:25:59.734000 audit[2225]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.734000 audit[2225]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=828 a0=3 a1=ffffc2f16c20 a2=0 a3=1 items=0 ppid=2109 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.734000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:25:59.735000 audit[2226]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2226 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.735000 audit[2226]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffca85d940 a2=0 a3=1 items=0 ppid=2109 pid=2226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.735000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:25:59.737000 audit[2228]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.737000 audit[2228]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=528 a0=3 a1=ffffd861c380 a2=0 a3=1 items=0 ppid=2109 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.737000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:25:59.738000 audit[2229]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.738000 audit[2229]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=104 a0=3 a1=ffffecf1b990 a2=0 a3=1 items=0 ppid=2109 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.738000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:25:59.740000 audit[2231]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.740000 audit[2231]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffed44e560 a2=0 a3=1 items=0 ppid=2109 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.740000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:25:59.743000 audit[2234]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.743000 audit[2234]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffc2284750 a2=0 a3=1 items=0 ppid=2109 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.743000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:25:59.747000 audit[2237]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.747000 audit[2237]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=748 a0=3 a1=ffffce3e12f0 a2=0 a3=1 items=0 ppid=2109 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.747000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:25:59.748000 audit[2238]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.748000 audit[2238]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=96 a0=3 a1=ffffde67bd20 a2=0 a3=1 items=0 ppid=2109 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.748000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:25:59.750000 audit[2240]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.750000 audit[2240]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=600 a0=3 a1=fffff121c0f0 a2=0 a3=1 items=0 ppid=2109 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.750000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:25:59.752000 audit[2243]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.752000 audit[2243]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=608 a0=3 a1=ffffcf454b00 a2=0 a3=1 items=0 ppid=2109 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.752000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:25:59.753000 audit[2244]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2244 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.753000 audit[2244]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=fffff54e51e0 a2=0 a3=1 items=0 ppid=2109 pid=2244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.753000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:25:59.755000 audit[2246]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2246 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.755000 audit[2246]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=612 a0=3 a1=fffff6f19a50 a2=0 a3=1 items=0 ppid=2109 pid=2246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.755000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:25:59.757000 audit[2247]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2247 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.757000 audit[2247]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=100 a0=3 a1=ffffc98c9b50 a2=0 a3=1 items=0 ppid=2109 pid=2247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.757000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:25:59.759000 audit[2249]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2249 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.759000 audit[2249]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffed8151c0 a2=0 a3=1 items=0 ppid=2109 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.759000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:25:59.762000 audit[2252]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2252 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:25:59.762000 audit[2252]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=228 a0=3 a1=ffffda1bff90 a2=0 a3=1 items=0 ppid=2109 pid=2252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.762000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:25:59.765000 audit[2254]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:25:59.765000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2088 a0=3 a1=ffffd46de8c0 a2=0 a3=1 items=0 ppid=2109 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.765000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:25:59.765000 audit[2254]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2254 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:25:59.765000 audit[2254]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2056 a0=3 a1=ffffd46de8c0 a2=0 a3=1 items=0 ppid=2109 pid=2254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:25:59.765000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:00.028417 env[1217]: time="2025-07-15T11:26:00.028376861Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:00.030037 env[1217]: time="2025-07-15T11:26:00.029991579Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:00.031496 env[1217]: time="2025-07-15T11:26:00.031455424Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:00.033247 env[1217]: time="2025-07-15T11:26:00.033219695Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:00.033910 env[1217]: time="2025-07-15T11:26:00.033664834Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:7f8a5b1dba618e907d5f7804e42b3bd7cd5766bc3b0a66da25ff2c687e356bb0\"" Jul 15 11:26:00.039726 env[1217]: time="2025-07-15T11:26:00.039675168Z" level=info msg="CreateContainer within sandbox \"da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:26:00.049239 env[1217]: time="2025-07-15T11:26:00.049206564Z" level=info msg="CreateContainer within sandbox \"da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2\"" Jul 15 11:26:00.049743 env[1217]: time="2025-07-15T11:26:00.049673948Z" level=info msg="StartContainer for \"064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2\"" Jul 15 11:26:00.075581 systemd[1]: Started cri-containerd-064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2.scope. Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.095000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit: BPF prog-id=117 op=LOAD Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2016 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:00.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343438376532316436653634613165663835346262303362663439 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2016 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:00.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343438376532316436653634613165663835346262303362663439 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit: BPF prog-id=118 op=LOAD Jul 15 11:26:00.096000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2016 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:00.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343438376532316436653634613165663835346262303362663439 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit: BPF prog-id=119 op=LOAD Jul 15 11:26:00.096000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2016 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:00.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343438376532316436653634613165663835346262303362663439 Jul 15 11:26:00.096000 audit: BPF prog-id=119 op=UNLOAD Jul 15 11:26:00.096000 audit: BPF prog-id=118 op=UNLOAD Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { perfmon } for pid=2262 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit[2262]: AVC avc: denied { bpf } for pid=2262 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:00.096000 audit: BPF prog-id=120 op=LOAD Jul 15 11:26:00.096000 audit[2262]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2016 pid=2262 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:00.096000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343438376532316436653634613165663835346262303362663439 Jul 15 11:26:00.111359 env[1217]: time="2025-07-15T11:26:00.111314909Z" level=info msg="StartContainer for \"064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2\" returns successfully" Jul 15 11:26:00.580119 kubelet[1958]: I0715 11:26:00.580061 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-dzzrp" podStartSLOduration=3.580045109 podStartE2EDuration="3.580045109s" podCreationTimestamp="2025-07-15 11:25:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:25:59.577599374 +0000 UTC m=+8.125963278" watchObservedRunningTime="2025-07-15 11:26:00.580045109 +0000 UTC m=+9.128408973" Jul 15 11:26:00.580448 kubelet[1958]: I0715 11:26:00.580183 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-kctp7" podStartSLOduration=1.038157125 podStartE2EDuration="2.580178738s" podCreationTimestamp="2025-07-15 11:25:58 +0000 UTC" firstStartedPulling="2025-07-15 11:25:58.49560426 +0000 UTC m=+7.043968164" lastFinishedPulling="2025-07-15 11:26:00.037625873 +0000 UTC m=+8.585989777" observedRunningTime="2025-07-15 11:26:00.579892275 +0000 UTC m=+9.128256179" watchObservedRunningTime="2025-07-15 11:26:00.580178738 +0000 UTC m=+9.128542642" Jul 15 11:26:01.544564 kubelet[1958]: E0715 11:26:01.544468 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:01.573772 kubelet[1958]: E0715 11:26:01.573746 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:02.163892 systemd[1]: cri-containerd-064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2.scope: Deactivated successfully. Jul 15 11:26:02.165700 kernel: kauditd_printk_skb: 360 callbacks suppressed Jul 15 11:26:02.165799 kernel: audit: type=1334 audit(1752578762.162:940): prog-id=117 op=UNLOAD Jul 15 11:26:02.162000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:26:02.168000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:26:02.170805 kernel: audit: type=1334 audit(1752578762.168:941): prog-id=120 op=UNLOAD Jul 15 11:26:02.214170 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2-rootfs.mount: Deactivated successfully. Jul 15 11:26:02.301080 env[1217]: time="2025-07-15T11:26:02.301010959Z" level=info msg="shim disconnected" id=064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2 Jul 15 11:26:02.301080 env[1217]: time="2025-07-15T11:26:02.301065770Z" level=warning msg="cleaning up after shim disconnected" id=064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2 namespace=k8s.io Jul 15 11:26:02.301080 env[1217]: time="2025-07-15T11:26:02.301074892Z" level=info msg="cleaning up dead shim" Jul 15 11:26:02.311233 env[1217]: time="2025-07-15T11:26:02.311165625Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:26:02Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2313 runtime=io.containerd.runc.v2\n" Jul 15 11:26:02.576040 kubelet[1958]: I0715 11:26:02.576000 1958 scope.go:117] "RemoveContainer" containerID="064487e21d6e64a1ef854bb03bf4964dbaf7cc70a817842a46d66c3e7fadd6f2" Jul 15 11:26:02.577852 env[1217]: time="2025-07-15T11:26:02.577806539Z" level=info msg="CreateContainer within sandbox \"da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 15 11:26:02.593035 env[1217]: time="2025-07-15T11:26:02.592970964Z" level=info msg="CreateContainer within sandbox \"da6c7e87f8fe6e77644fb0b21dc8bddabd47932fab3490c4a37397429bc0e1ec\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"e482a228bd06095eca1a27927fbf6630ecd3205cc21ef0c550fa42929adefbf0\"" Jul 15 11:26:02.593872 env[1217]: time="2025-07-15T11:26:02.593838457Z" level=info msg="StartContainer for \"e482a228bd06095eca1a27927fbf6630ecd3205cc21ef0c550fa42929adefbf0\"" Jul 15 11:26:02.615051 systemd[1]: Started cri-containerd-e482a228bd06095eca1a27927fbf6630ecd3205cc21ef0c550fa42929adefbf0.scope. Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.666387 kernel: audit: type=1400 audit(1752578762.662:942): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.666467 kernel: audit: type=1400 audit(1752578762.662:943): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.666490 kernel: audit: type=1400 audit(1752578762.662:944): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.669819 kernel: audit: type=1400 audit(1752578762.662:945): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.669871 kernel: audit: type=1400 audit(1752578762.662:946): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.671553 kernel: audit: type=1400 audit(1752578762.662:947): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.675025 kernel: audit: type=1400 audit(1752578762.662:948): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.677019 kernel: audit: type=1400 audit(1752578762.662:949): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.662000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit: BPF prog-id=121 op=LOAD Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2016 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:02.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383261323238626430363039356563613161323739323766626636 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2016 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:02.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383261323238626430363039356563613161323739323766626636 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.664000 audit: BPF prog-id=122 op=LOAD Jul 15 11:26:02.664000 audit[2347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2016 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:02.664000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383261323238626430363039356563613161323739323766626636 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.665000 audit: BPF prog-id=123 op=LOAD Jul 15 11:26:02.665000 audit[2347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2016 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:02.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383261323238626430363039356563613161323739323766626636 Jul 15 11:26:02.667000 audit: BPF prog-id=123 op=UNLOAD Jul 15 11:26:02.667000 audit: BPF prog-id=122 op=UNLOAD Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { perfmon } for pid=2347 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit[2347]: AVC avc: denied { bpf } for pid=2347 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:02.667000 audit: BPF prog-id=124 op=LOAD Jul 15 11:26:02.667000 audit[2347]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2016 pid=2347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:02.667000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6534383261323238626430363039356563613161323739323766626636 Jul 15 11:26:02.686763 env[1217]: time="2025-07-15T11:26:02.686717987Z" level=info msg="StartContainer for \"e482a228bd06095eca1a27927fbf6630ecd3205cc21ef0c550fa42929adefbf0\" returns successfully" Jul 15 11:26:03.215030 systemd[1]: run-containerd-runc-k8s.io-e482a228bd06095eca1a27927fbf6630ecd3205cc21ef0c550fa42929adefbf0-runc.xtdMRI.mount: Deactivated successfully. Jul 15 11:26:03.998049 kubelet[1958]: E0715 11:26:03.998009 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:05.177718 kubelet[1958]: E0715 11:26:05.177401 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:05.359677 sudo[1352]: pam_unix(sudo:session): session closed for user root Jul 15 11:26:05.359000 audit[1352]: USER_END pid=1352 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.359000 audit[1352]: CRED_DISP pid=1352 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.361937 sshd[1349]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:05.362000 audit[1349]: USER_END pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:05.362000 audit[1349]: CRED_DISP pid=1349 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:05.363000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.138:22-10.0.0.1:43068 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:05.364387 systemd[1]: sshd@6-10.0.0.138:22-10.0.0.1:43068.service: Deactivated successfully. Jul 15 11:26:05.365164 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:26:05.365319 systemd[1]: session-7.scope: Consumed 7.631s CPU time. Jul 15 11:26:05.366014 systemd-logind[1204]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:26:05.366629 systemd-logind[1204]: Removed session 7. Jul 15 11:26:05.582447 kubelet[1958]: E0715 11:26:05.582412 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:06.002553 update_engine[1207]: I0715 11:26:06.002502 1207 update_attempter.cc:509] Updating boot flags... Jul 15 11:26:06.911000 audit[2425]: NETFILTER_CFG table=filter:89 family=2 entries=14 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:06.911000 audit[2425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5248 a0=3 a1=ffffc6406400 a2=0 a3=1 items=0 ppid=2109 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:06.911000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:06.918000 audit[2425]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2425 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:06.918000 audit[2425]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffc6406400 a2=0 a3=1 items=0 ppid=2109 pid=2425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:06.918000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:06.929000 audit[2427]: NETFILTER_CFG table=filter:91 family=2 entries=15 op=nft_register_rule pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:06.929000 audit[2427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5992 a0=3 a1=ffffcdb11aa0 a2=0 a3=1 items=0 ppid=2109 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:06.929000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:06.934000 audit[2427]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2427 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:06.934000 audit[2427]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffcdb11aa0 a2=0 a3=1 items=0 ppid=2109 pid=2427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:06.934000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.366000 audit[2430]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.369755 kernel: kauditd_printk_skb: 66 callbacks suppressed Jul 15 11:26:10.369861 kernel: audit: type=1325 audit(1752578770.366:969): table=filter:93 family=2 entries=17 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.369887 kernel: audit: type=1300 audit(1752578770.366:969): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd491e280 a2=0 a3=1 items=0 ppid=2109 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.366000 audit[2430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffd491e280 a2=0 a3=1 items=0 ppid=2109 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.372803 kernel: audit: type=1327 audit(1752578770.366:969): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.366000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.376000 audit[2430]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.376000 audit[2430]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd491e280 a2=0 a3=1 items=0 ppid=2109 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.381465 kernel: audit: type=1325 audit(1752578770.376:970): table=nat:94 family=2 entries=12 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.381540 kernel: audit: type=1300 audit(1752578770.376:970): arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd491e280 a2=0 a3=1 items=0 ppid=2109 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.381564 kernel: audit: type=1327 audit(1752578770.376:970): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.376000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.395877 systemd[1]: Created slice kubepods-besteffort-podfb273568_4a2c_46ce_9dc1_e07e49dce65d.slice. Jul 15 11:26:10.399000 audit[2432]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.399000 audit[2432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe4b39800 a2=0 a3=1 items=0 ppid=2109 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.404627 kernel: audit: type=1325 audit(1752578770.399:971): table=filter:95 family=2 entries=18 op=nft_register_rule pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.404684 kernel: audit: type=1300 audit(1752578770.399:971): arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe4b39800 a2=0 a3=1 items=0 ppid=2109 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.404716 kernel: audit: type=1327 audit(1752578770.399:971): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.399000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.408000 audit[2432]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.408000 audit[2432]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffe4b39800 a2=0 a3=1 items=0 ppid=2109 pid=2432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.408000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:10.411723 kernel: audit: type=1325 audit(1752578770.408:972): table=nat:96 family=2 entries=12 op=nft_register_rule pid=2432 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:10.462944 kubelet[1958]: I0715 11:26:10.462616 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-ntmm8\" (UniqueName: \"kubernetes.io/projected/fb273568-4a2c-46ce-9dc1-e07e49dce65d-kube-api-access-ntmm8\") pod \"calico-typha-984bdcb95-rbqb4\" (UID: \"fb273568-4a2c-46ce-9dc1-e07e49dce65d\") " pod="calico-system/calico-typha-984bdcb95-rbqb4" Jul 15 11:26:10.462944 kubelet[1958]: I0715 11:26:10.462655 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/fb273568-4a2c-46ce-9dc1-e07e49dce65d-tigera-ca-bundle\") pod \"calico-typha-984bdcb95-rbqb4\" (UID: \"fb273568-4a2c-46ce-9dc1-e07e49dce65d\") " pod="calico-system/calico-typha-984bdcb95-rbqb4" Jul 15 11:26:10.462944 kubelet[1958]: I0715 11:26:10.462718 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/fb273568-4a2c-46ce-9dc1-e07e49dce65d-typha-certs\") pod \"calico-typha-984bdcb95-rbqb4\" (UID: \"fb273568-4a2c-46ce-9dc1-e07e49dce65d\") " pod="calico-system/calico-typha-984bdcb95-rbqb4" Jul 15 11:26:10.465544 systemd[1]: Created slice kubepods-besteffort-pod0ede866d_3642_4d57_936b_353a79ba9769.slice. Jul 15 11:26:10.563533 kubelet[1958]: I0715 11:26:10.563477 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-cni-log-dir\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563763 kubelet[1958]: I0715 11:26:10.563549 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-xtables-lock\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563763 kubelet[1958]: I0715 11:26:10.563569 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-cni-net-dir\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563763 kubelet[1958]: I0715 11:26:10.563586 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vg72r\" (UniqueName: \"kubernetes.io/projected/0ede866d-3642-4d57-936b-353a79ba9769-kube-api-access-vg72r\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563763 kubelet[1958]: I0715 11:26:10.563613 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-lib-modules\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563763 kubelet[1958]: I0715 11:26:10.563629 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-cni-bin-dir\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563947 kubelet[1958]: I0715 11:26:10.563644 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-flexvol-driver-host\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563947 kubelet[1958]: I0715 11:26:10.563659 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-var-run-calico\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563947 kubelet[1958]: I0715 11:26:10.563673 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-var-lib-calico\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563947 kubelet[1958]: I0715 11:26:10.563699 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/0ede866d-3642-4d57-936b-353a79ba9769-node-certs\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.563947 kubelet[1958]: I0715 11:26:10.563715 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/0ede866d-3642-4d57-936b-353a79ba9769-tigera-ca-bundle\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.564057 kubelet[1958]: I0715 11:26:10.563733 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/0ede866d-3642-4d57-936b-353a79ba9769-policysync\") pod \"calico-node-2btbq\" (UID: \"0ede866d-3642-4d57-936b-353a79ba9769\") " pod="calico-system/calico-node-2btbq" Jul 15 11:26:10.565195 kubelet[1958]: E0715 11:26:10.565138 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7vgn6" podUID="f950f0d3-7bd4-45b0-9b8d-5674d38b8105" Jul 15 11:26:10.664755 kubelet[1958]: I0715 11:26:10.664613 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/f950f0d3-7bd4-45b0-9b8d-5674d38b8105-kubelet-dir\") pod \"csi-node-driver-7vgn6\" (UID: \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\") " pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:10.664755 kubelet[1958]: I0715 11:26:10.664649 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/f950f0d3-7bd4-45b0-9b8d-5674d38b8105-varrun\") pod \"csi-node-driver-7vgn6\" (UID: \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\") " pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:10.664755 kubelet[1958]: I0715 11:26:10.664671 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-fbjvs\" (UniqueName: \"kubernetes.io/projected/f950f0d3-7bd4-45b0-9b8d-5674d38b8105-kube-api-access-fbjvs\") pod \"csi-node-driver-7vgn6\" (UID: \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\") " pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:10.664755 kubelet[1958]: I0715 11:26:10.664717 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/f950f0d3-7bd4-45b0-9b8d-5674d38b8105-socket-dir\") pod \"csi-node-driver-7vgn6\" (UID: \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\") " pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:10.664973 kubelet[1958]: I0715 11:26:10.664791 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/f950f0d3-7bd4-45b0-9b8d-5674d38b8105-registration-dir\") pod \"csi-node-driver-7vgn6\" (UID: \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\") " pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:10.666421 kubelet[1958]: E0715 11:26:10.666400 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.666527 kubelet[1958]: W0715 11:26:10.666512 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.666608 kubelet[1958]: E0715 11:26:10.666594 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.666894 kubelet[1958]: E0715 11:26:10.666876 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.666983 kubelet[1958]: W0715 11:26:10.666970 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.667062 kubelet[1958]: E0715 11:26:10.667049 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.667273 kubelet[1958]: E0715 11:26:10.667236 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.667273 kubelet[1958]: W0715 11:26:10.667261 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.667273 kubelet[1958]: E0715 11:26:10.667279 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.673129 kubelet[1958]: E0715 11:26:10.673111 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.673129 kubelet[1958]: W0715 11:26:10.673126 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.673244 kubelet[1958]: E0715 11:26:10.673207 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.673485 kubelet[1958]: E0715 11:26:10.673321 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.673485 kubelet[1958]: W0715 11:26:10.673331 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.673485 kubelet[1958]: E0715 11:26:10.673427 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.675670 kubelet[1958]: E0715 11:26:10.675643 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.675670 kubelet[1958]: W0715 11:26:10.675661 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.675793 kubelet[1958]: E0715 11:26:10.675768 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.675914 kubelet[1958]: E0715 11:26:10.675894 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.675914 kubelet[1958]: W0715 11:26:10.675906 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.675999 kubelet[1958]: E0715 11:26:10.675981 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.676827 kubelet[1958]: E0715 11:26:10.676806 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.676827 kubelet[1958]: W0715 11:26:10.676822 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.676936 kubelet[1958]: E0715 11:26:10.676858 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.677011 kubelet[1958]: E0715 11:26:10.676997 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.677011 kubelet[1958]: W0715 11:26:10.677008 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.677078 kubelet[1958]: E0715 11:26:10.677024 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.677858 kubelet[1958]: E0715 11:26:10.677831 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.677858 kubelet[1958]: W0715 11:26:10.677847 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.677956 kubelet[1958]: E0715 11:26:10.677862 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.682797 kubelet[1958]: E0715 11:26:10.682764 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.682797 kubelet[1958]: W0715 11:26:10.682784 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.682910 kubelet[1958]: E0715 11:26:10.682894 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.683820 kubelet[1958]: E0715 11:26:10.683790 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.683820 kubelet[1958]: W0715 11:26:10.683811 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.683923 kubelet[1958]: E0715 11:26:10.683901 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.684605 kubelet[1958]: E0715 11:26:10.684590 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.684605 kubelet[1958]: W0715 11:26:10.684604 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.684682 kubelet[1958]: E0715 11:26:10.684620 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.685874 kubelet[1958]: E0715 11:26:10.685860 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.685874 kubelet[1958]: W0715 11:26:10.685873 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.685946 kubelet[1958]: E0715 11:26:10.685885 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.697961 kubelet[1958]: E0715 11:26:10.697938 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:10.698584 env[1217]: time="2025-07-15T11:26:10.698533823Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-984bdcb95-rbqb4,Uid:fb273568-4a2c-46ce-9dc1-e07e49dce65d,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:10.721773 env[1217]: time="2025-07-15T11:26:10.720899254Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:10.721773 env[1217]: time="2025-07-15T11:26:10.720946701Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:10.721773 env[1217]: time="2025-07-15T11:26:10.720957142Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:10.721773 env[1217]: time="2025-07-15T11:26:10.721101842Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/311a20dec1d94b5d58b768fe0578997bf2b64d15ae24296e810f64bf8ea15636 pid=2459 runtime=io.containerd.runc.v2 Jul 15 11:26:10.740293 systemd[1]: Started cri-containerd-311a20dec1d94b5d58b768fe0578997bf2b64d15ae24296e810f64bf8ea15636.scope. Jul 15 11:26:10.768837 kubelet[1958]: E0715 11:26:10.765702 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.768837 kubelet[1958]: W0715 11:26:10.765722 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.768837 kubelet[1958]: E0715 11:26:10.765739 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.768837 kubelet[1958]: E0715 11:26:10.766478 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.768837 kubelet[1958]: W0715 11:26:10.766488 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.768837 kubelet[1958]: E0715 11:26:10.766502 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.768837 kubelet[1958]: E0715 11:26:10.768799 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.768837 kubelet[1958]: W0715 11:26:10.768836 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.769219 env[1217]: time="2025-07-15T11:26:10.768202741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2btbq,Uid:0ede866d-3642-4d57-936b-353a79ba9769,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:10.769271 kubelet[1958]: E0715 11:26:10.768857 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772042 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773650 kubelet[1958]: W0715 11:26:10.772055 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772165 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772265 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773650 kubelet[1958]: W0715 11:26:10.772275 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772354 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772431 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773650 kubelet[1958]: W0715 11:26:10.772439 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772522 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773650 kubelet[1958]: E0715 11:26:10.772598 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773988 kubelet[1958]: W0715 11:26:10.772606 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.773988 kubelet[1958]: E0715 11:26:10.772682 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773988 kubelet[1958]: E0715 11:26:10.772767 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773988 kubelet[1958]: W0715 11:26:10.772774 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.773988 kubelet[1958]: E0715 11:26:10.772795 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773988 kubelet[1958]: E0715 11:26:10.773001 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773988 kubelet[1958]: W0715 11:26:10.773016 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.773988 kubelet[1958]: E0715 11:26:10.773028 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.773988 kubelet[1958]: E0715 11:26:10.773176 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.773988 kubelet[1958]: W0715 11:26:10.773185 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773193 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773334 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.774318 kubelet[1958]: W0715 11:26:10.773347 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773417 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773505 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.774318 kubelet[1958]: W0715 11:26:10.773512 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773591 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773727 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.774318 kubelet[1958]: W0715 11:26:10.773736 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.774318 kubelet[1958]: E0715 11:26:10.773824 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.774994 kubelet[1958]: E0715 11:26:10.774700 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.774994 kubelet[1958]: W0715 11:26:10.774717 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.774994 kubelet[1958]: E0715 11:26:10.774780 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.774994 kubelet[1958]: E0715 11:26:10.774977 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.774994 kubelet[1958]: W0715 11:26:10.774986 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.775203 kubelet[1958]: E0715 11:26:10.775065 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.779330 kubelet[1958]: E0715 11:26:10.777828 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.779330 kubelet[1958]: W0715 11:26:10.777849 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.779330 kubelet[1958]: E0715 11:26:10.777946 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.781808 kubelet[1958]: E0715 11:26:10.780801 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.781808 kubelet[1958]: W0715 11:26:10.780824 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.781808 kubelet[1958]: E0715 11:26:10.780865 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.781808 kubelet[1958]: E0715 11:26:10.781009 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.781808 kubelet[1958]: W0715 11:26:10.781019 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.781808 kubelet[1958]: E0715 11:26:10.781093 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.782025 kubelet[1958]: E0715 11:26:10.781925 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.782025 kubelet[1958]: W0715 11:26:10.781934 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.782025 kubelet[1958]: E0715 11:26:10.782005 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.784181 kubelet[1958]: E0715 11:26:10.783819 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.784181 kubelet[1958]: W0715 11:26:10.783835 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.784181 kubelet[1958]: E0715 11:26:10.783913 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.784871 kubelet[1958]: E0715 11:26:10.784786 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.784871 kubelet[1958]: W0715 11:26:10.784798 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.784957 kubelet[1958]: E0715 11:26:10.784900 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.785067 kubelet[1958]: E0715 11:26:10.785044 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.785067 kubelet[1958]: W0715 11:26:10.785058 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.785212 kubelet[1958]: E0715 11:26:10.785152 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.785250 kubelet[1958]: E0715 11:26:10.785227 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.785250 kubelet[1958]: W0715 11:26:10.785235 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.785379 kubelet[1958]: E0715 11:26:10.785319 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.786834 kubelet[1958]: E0715 11:26:10.786663 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.786834 kubelet[1958]: W0715 11:26:10.786683 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.787013 kubelet[1958]: E0715 11:26:10.786897 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.787432 kubelet[1958]: E0715 11:26:10.787404 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.787432 kubelet[1958]: W0715 11:26:10.787421 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.787432 kubelet[1958]: E0715 11:26:10.787434 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.796678 kubelet[1958]: E0715 11:26:10.796476 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:10.796678 kubelet[1958]: W0715 11:26:10.796496 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:10.796678 kubelet[1958]: E0715 11:26:10.796508 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.805000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit: BPF prog-id=125 op=LOAD Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2459 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316132306465633164393462356435386237363866653035373839 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2459 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316132306465633164393462356435386237363866653035373839 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit: BPF prog-id=126 op=LOAD Jul 15 11:26:10.806000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2459 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316132306465633164393462356435386237363866653035373839 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.806000 audit: BPF prog-id=127 op=LOAD Jul 15 11:26:10.806000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2459 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.806000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316132306465633164393462356435386237363866653035373839 Jul 15 11:26:10.807000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:26:10.808655 env[1217]: time="2025-07-15T11:26:10.804131987Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:10.808655 env[1217]: time="2025-07-15T11:26:10.804174072Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:10.808655 env[1217]: time="2025-07-15T11:26:10.804183954Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:10.808655 env[1217]: time="2025-07-15T11:26:10.804332573Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3 pid=2519 runtime=io.containerd.runc.v2 Jul 15 11:26:10.809000 audit: BPF prog-id=126 op=UNLOAD Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { perfmon } for pid=2468 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit[2468]: AVC avc: denied { bpf } for pid=2468 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.809000 audit: BPF prog-id=128 op=LOAD Jul 15 11:26:10.809000 audit[2468]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2459 pid=2468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.809000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3331316132306465633164393462356435386237363866653035373839 Jul 15 11:26:10.829754 systemd[1]: Started cri-containerd-d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3.scope. Jul 15 11:26:10.842067 env[1217]: time="2025-07-15T11:26:10.842020854Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-984bdcb95-rbqb4,Uid:fb273568-4a2c-46ce-9dc1-e07e49dce65d,Namespace:calico-system,Attempt:0,} returns sandbox id \"311a20dec1d94b5d58b768fe0578997bf2b64d15ae24296e810f64bf8ea15636\"" Jul 15 11:26:10.848088 kubelet[1958]: E0715 11:26:10.848055 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:10.849492 env[1217]: time="2025-07-15T11:26:10.849460849Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.861000 audit: BPF prog-id=129 op=LOAD Jul 15 11:26:10.862000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.862000 audit[2530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=2519 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.862000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356539663630653664343033383061613338633834386435363332 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2519 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356539663630653664343033383061613338633834386435363332 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.863000 audit: BPF prog-id=130 op=LOAD Jul 15 11:26:10.863000 audit[2530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2519 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.863000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356539663630653664343033383061613338633834386435363332 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit: BPF prog-id=131 op=LOAD Jul 15 11:26:10.864000 audit[2530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2519 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356539663630653664343033383061613338633834386435363332 Jul 15 11:26:10.864000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:26:10.864000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { perfmon } for pid=2530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit[2530]: AVC avc: denied { bpf } for pid=2530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:10.864000 audit: BPF prog-id=132 op=LOAD Jul 15 11:26:10.864000 audit[2530]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2519 pid=2530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:10.864000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6431356539663630653664343033383061613338633834386435363332 Jul 15 11:26:10.893020 env[1217]: time="2025-07-15T11:26:10.892982310Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2btbq,Uid:0ede866d-3642-4d57-936b-353a79ba9769,Namespace:calico-system,Attempt:0,} returns sandbox id \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\"" Jul 15 11:26:11.425000 audit[2561]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2561 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:11.425000 audit[2561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8224 a0=3 a1=ffffd10ec1c0 a2=0 a3=1 items=0 ppid=2109 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:11.425000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:11.432000 audit[2561]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2561 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:11.432000 audit[2561]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=2700 a0=3 a1=ffffd10ec1c0 a2=0 a3=1 items=0 ppid=2109 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:11.432000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:11.815231 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2421209539.mount: Deactivated successfully. Jul 15 11:26:12.552481 kubelet[1958]: E0715 11:26:12.552427 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7vgn6" podUID="f950f0d3-7bd4-45b0-9b8d-5674d38b8105" Jul 15 11:26:12.602014 env[1217]: time="2025-07-15T11:26:12.601974637Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:12.604305 env[1217]: time="2025-07-15T11:26:12.604266437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:12.611565 env[1217]: time="2025-07-15T11:26:12.611534323Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:12.612827 env[1217]: time="2025-07-15T11:26:12.612799957Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:12.613227 env[1217]: time="2025-07-15T11:26:12.613192285Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:bd819526ff844d29b60cd75e846a1f55306016ff269d881d52a9b6c7b2eef0b2\"" Jul 15 11:26:12.618454 env[1217]: time="2025-07-15T11:26:12.618419443Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:26:12.629818 env[1217]: time="2025-07-15T11:26:12.625438779Z" level=info msg="CreateContainer within sandbox \"311a20dec1d94b5d58b768fe0578997bf2b64d15ae24296e810f64bf8ea15636\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:26:12.646763 env[1217]: time="2025-07-15T11:26:12.645803023Z" level=info msg="CreateContainer within sandbox \"311a20dec1d94b5d58b768fe0578997bf2b64d15ae24296e810f64bf8ea15636\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"bbfc83d5f111ed1b951337a890d13bee2cc04fd834fcc9ec3fa816a04016ad07\"" Jul 15 11:26:12.647469 env[1217]: time="2025-07-15T11:26:12.647413579Z" level=info msg="StartContainer for \"bbfc83d5f111ed1b951337a890d13bee2cc04fd834fcc9ec3fa816a04016ad07\"" Jul 15 11:26:12.675860 systemd[1]: Started cri-containerd-bbfc83d5f111ed1b951337a890d13bee2cc04fd834fcc9ec3fa816a04016ad07.scope. Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit: BPF prog-id=133 op=LOAD Jul 15 11:26:12.703000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[2574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=2459 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:12.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262666338336435663131316564316239353133333761383930643133 Jul 15 11:26:12.703000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.703000 audit[2574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2459 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:12.703000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262666338336435663131316564316239353133333761383930643133 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit: BPF prog-id=134 op=LOAD Jul 15 11:26:12.704000 audit[2574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2459 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:12.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262666338336435663131316564316239353133333761383930643133 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit: BPF prog-id=135 op=LOAD Jul 15 11:26:12.704000 audit[2574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2459 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:12.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262666338336435663131316564316239353133333761383930643133 Jul 15 11:26:12.704000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:26:12.704000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { perfmon } for pid=2574 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit[2574]: AVC avc: denied { bpf } for pid=2574 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:12.704000 audit: BPF prog-id=136 op=LOAD Jul 15 11:26:12.704000 audit[2574]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2459 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:12.704000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262666338336435663131316564316239353133333761383930643133 Jul 15 11:26:12.757214 env[1217]: time="2025-07-15T11:26:12.757153123Z" level=info msg="StartContainer for \"bbfc83d5f111ed1b951337a890d13bee2cc04fd834fcc9ec3fa816a04016ad07\" returns successfully" Jul 15 11:26:13.605925 kubelet[1958]: E0715 11:26:13.605876 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:13.622032 kubelet[1958]: I0715 11:26:13.621753 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-984bdcb95-rbqb4" podStartSLOduration=1.855181225 podStartE2EDuration="3.621740053s" podCreationTimestamp="2025-07-15 11:26:10 +0000 UTC" firstStartedPulling="2025-07-15 11:26:10.848891893 +0000 UTC m=+19.397255797" lastFinishedPulling="2025-07-15 11:26:12.615450721 +0000 UTC m=+21.163814625" observedRunningTime="2025-07-15 11:26:13.621484303 +0000 UTC m=+22.169848327" watchObservedRunningTime="2025-07-15 11:26:13.621740053 +0000 UTC m=+22.170103957" Jul 15 11:26:13.646711 env[1217]: time="2025-07-15T11:26:13.646657079Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:13.648762 env[1217]: time="2025-07-15T11:26:13.648735001Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:13.650436 env[1217]: time="2025-07-15T11:26:13.650410277Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:13.651899 env[1217]: time="2025-07-15T11:26:13.651859966Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:13.652414 env[1217]: time="2025-07-15T11:26:13.652373906Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:53f638101e3d73f7dd5e42dc42fb3d94ae1978e8958677222c3de6ec1d8c3d4f\"" Jul 15 11:26:13.655366 env[1217]: time="2025-07-15T11:26:13.655332411Z" level=info msg="CreateContainer within sandbox \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:26:13.667312 env[1217]: time="2025-07-15T11:26:13.667277924Z" level=info msg="CreateContainer within sandbox \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c\"" Jul 15 11:26:13.667831 env[1217]: time="2025-07-15T11:26:13.667766341Z" level=info msg="StartContainer for \"903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c\"" Jul 15 11:26:13.669554 kubelet[1958]: E0715 11:26:13.669435 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.669554 kubelet[1958]: W0715 11:26:13.669463 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.672118 kubelet[1958]: E0715 11:26:13.671985 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.672516 kubelet[1958]: E0715 11:26:13.672376 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.672516 kubelet[1958]: W0715 11:26:13.672392 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.672516 kubelet[1958]: E0715 11:26:13.672431 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.672821 kubelet[1958]: E0715 11:26:13.672718 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.672821 kubelet[1958]: W0715 11:26:13.672732 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.672821 kubelet[1958]: E0715 11:26:13.672742 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.673104 kubelet[1958]: E0715 11:26:13.672995 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.673104 kubelet[1958]: W0715 11:26:13.673007 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.673104 kubelet[1958]: E0715 11:26:13.673017 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.673894 kubelet[1958]: E0715 11:26:13.673783 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.673894 kubelet[1958]: W0715 11:26:13.673800 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.673894 kubelet[1958]: E0715 11:26:13.673812 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.674181 kubelet[1958]: E0715 11:26:13.674080 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.674181 kubelet[1958]: W0715 11:26:13.674092 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.674181 kubelet[1958]: E0715 11:26:13.674102 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.674466 kubelet[1958]: E0715 11:26:13.674355 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.674466 kubelet[1958]: W0715 11:26:13.674368 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.674466 kubelet[1958]: E0715 11:26:13.674379 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.674762 kubelet[1958]: E0715 11:26:13.674640 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.674762 kubelet[1958]: W0715 11:26:13.674652 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.674762 kubelet[1958]: E0715 11:26:13.674662 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.674954 kubelet[1958]: E0715 11:26:13.674941 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.675025 kubelet[1958]: W0715 11:26:13.675013 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.675089 kubelet[1958]: E0715 11:26:13.675077 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.675313 kubelet[1958]: E0715 11:26:13.675299 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.675399 kubelet[1958]: W0715 11:26:13.675386 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.675461 kubelet[1958]: E0715 11:26:13.675450 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.675676 kubelet[1958]: E0715 11:26:13.675663 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.675798 kubelet[1958]: W0715 11:26:13.675784 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.675860 kubelet[1958]: E0715 11:26:13.675849 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.676070 kubelet[1958]: E0715 11:26:13.676057 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.676147 kubelet[1958]: W0715 11:26:13.676135 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.676224 kubelet[1958]: E0715 11:26:13.676211 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.676450 kubelet[1958]: E0715 11:26:13.676437 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.676528 kubelet[1958]: W0715 11:26:13.676516 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.676588 kubelet[1958]: E0715 11:26:13.676577 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.676791 kubelet[1958]: E0715 11:26:13.676778 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.676878 kubelet[1958]: W0715 11:26:13.676864 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.676939 kubelet[1958]: E0715 11:26:13.676928 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.677175 kubelet[1958]: E0715 11:26:13.677160 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.677259 kubelet[1958]: W0715 11:26:13.677247 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.677320 kubelet[1958]: E0715 11:26:13.677309 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.689203 systemd[1]: Started cri-containerd-903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c.scope. Jul 15 11:26:13.694132 kubelet[1958]: E0715 11:26:13.694112 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.694132 kubelet[1958]: W0715 11:26:13.694131 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.694265 kubelet[1958]: E0715 11:26:13.694147 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.694500 kubelet[1958]: E0715 11:26:13.694368 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.694500 kubelet[1958]: W0715 11:26:13.694383 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.694500 kubelet[1958]: E0715 11:26:13.694393 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.694837 kubelet[1958]: E0715 11:26:13.694683 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.694837 kubelet[1958]: W0715 11:26:13.694714 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.694837 kubelet[1958]: E0715 11:26:13.694736 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.695145 kubelet[1958]: E0715 11:26:13.695021 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.695145 kubelet[1958]: W0715 11:26:13.695033 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.695145 kubelet[1958]: E0715 11:26:13.695045 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.695491 kubelet[1958]: E0715 11:26:13.695337 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.695491 kubelet[1958]: W0715 11:26:13.695350 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.695491 kubelet[1958]: E0715 11:26:13.695361 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.695797 kubelet[1958]: E0715 11:26:13.695669 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.695797 kubelet[1958]: W0715 11:26:13.695682 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.695797 kubelet[1958]: E0715 11:26:13.695762 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.696079 kubelet[1958]: E0715 11:26:13.695974 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.696079 kubelet[1958]: W0715 11:26:13.695986 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.696079 kubelet[1958]: E0715 11:26:13.696026 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.696364 kubelet[1958]: E0715 11:26:13.696262 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.696364 kubelet[1958]: W0715 11:26:13.696274 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.696364 kubelet[1958]: E0715 11:26:13.696304 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.696666 kubelet[1958]: E0715 11:26:13.696540 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.696666 kubelet[1958]: W0715 11:26:13.696553 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.696666 kubelet[1958]: E0715 11:26:13.696567 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.696987 kubelet[1958]: E0715 11:26:13.696866 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.696987 kubelet[1958]: W0715 11:26:13.696880 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.696987 kubelet[1958]: E0715 11:26:13.696894 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.697330 kubelet[1958]: E0715 11:26:13.697218 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.697330 kubelet[1958]: W0715 11:26:13.697231 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.697330 kubelet[1958]: E0715 11:26:13.697244 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.697606 kubelet[1958]: E0715 11:26:13.697519 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.697606 kubelet[1958]: W0715 11:26:13.697531 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.697606 kubelet[1958]: E0715 11:26:13.697598 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.697978 kubelet[1958]: E0715 11:26:13.697861 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.697978 kubelet[1958]: W0715 11:26:13.697874 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.697978 kubelet[1958]: E0715 11:26:13.697893 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.698305 kubelet[1958]: E0715 11:26:13.698171 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.698305 kubelet[1958]: W0715 11:26:13.698184 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.698305 kubelet[1958]: E0715 11:26:13.698199 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.698508 kubelet[1958]: E0715 11:26:13.698494 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.698579 kubelet[1958]: W0715 11:26:13.698566 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.698654 kubelet[1958]: E0715 11:26:13.698639 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.698920 kubelet[1958]: E0715 11:26:13.698897 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.698920 kubelet[1958]: W0715 11:26:13.698915 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.699006 kubelet[1958]: E0715 11:26:13.698927 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.699311 kubelet[1958]: E0715 11:26:13.699273 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.699311 kubelet[1958]: W0715 11:26:13.699289 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.699311 kubelet[1958]: E0715 11:26:13.699302 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.699498 kubelet[1958]: E0715 11:26:13.699484 1958 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:26:13.699498 kubelet[1958]: W0715 11:26:13.699496 1958 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:26:13.699563 kubelet[1958]: E0715 11:26:13.699505 1958 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=2519 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:13.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930336363653835316631303931643462363736306638353534656462 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.721000 audit: BPF prog-id=137 op=LOAD Jul 15 11:26:13.721000 audit[2628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=2519 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:13.721000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930336363653835316631303931643462363736306638353534656462 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit: BPF prog-id=138 op=LOAD Jul 15 11:26:13.723000 audit[2628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=2519 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:13.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930336363653835316631303931643462363736306638353534656462 Jul 15 11:26:13.723000 audit: BPF prog-id=138 op=UNLOAD Jul 15 11:26:13.723000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { perfmon } for pid=2628 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit[2628]: AVC avc: denied { bpf } for pid=2628 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:13.723000 audit: BPF prog-id=139 op=LOAD Jul 15 11:26:13.723000 audit[2628]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=2519 pid=2628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:13.723000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3930336363653835316631303931643462363736306638353534656462 Jul 15 11:26:13.744148 env[1217]: time="2025-07-15T11:26:13.744092362Z" level=info msg="StartContainer for \"903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c\" returns successfully" Jul 15 11:26:13.747954 systemd[1]: cri-containerd-903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c.scope: Deactivated successfully. Jul 15 11:26:13.751000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:26:13.775370 env[1217]: time="2025-07-15T11:26:13.775327365Z" level=info msg="shim disconnected" id=903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c Jul 15 11:26:13.775370 env[1217]: time="2025-07-15T11:26:13.775371450Z" level=warning msg="cleaning up after shim disconnected" id=903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c namespace=k8s.io Jul 15 11:26:13.775565 env[1217]: time="2025-07-15T11:26:13.775380131Z" level=info msg="cleaning up dead shim" Jul 15 11:26:13.782925 env[1217]: time="2025-07-15T11:26:13.782880405Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:26:13Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2683 runtime=io.containerd.runc.v2\n" Jul 15 11:26:14.550955 kubelet[1958]: E0715 11:26:14.550917 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7vgn6" podUID="f950f0d3-7bd4-45b0-9b8d-5674d38b8105" Jul 15 11:26:14.610183 kubelet[1958]: I0715 11:26:14.610144 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:26:14.610472 kubelet[1958]: E0715 11:26:14.610446 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:14.612548 env[1217]: time="2025-07-15T11:26:14.612209832Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:26:14.623925 systemd[1]: run-containerd-runc-k8s.io-903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c-runc.vB2M7x.mount: Deactivated successfully. Jul 15 11:26:14.624021 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-903cce851f1091d4b6760f8554edb6491f89e11be2487315ade6a202d4f7792c-rootfs.mount: Deactivated successfully. Jul 15 11:26:16.551122 kubelet[1958]: E0715 11:26:16.551074 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-7vgn6" podUID="f950f0d3-7bd4-45b0-9b8d-5674d38b8105" Jul 15 11:26:17.247304 env[1217]: time="2025-07-15T11:26:17.247247071Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:17.248621 env[1217]: time="2025-07-15T11:26:17.248590723Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:17.250033 env[1217]: time="2025-07-15T11:26:17.250001942Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:17.251400 env[1217]: time="2025-07-15T11:26:17.251374077Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:17.251868 env[1217]: time="2025-07-15T11:26:17.251838843Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:f6e344d58b3c5524e767c7d1dd4cb29c85ce820b0f3005a603532b6a22db5588\"" Jul 15 11:26:17.254242 env[1217]: time="2025-07-15T11:26:17.254207796Z" level=info msg="CreateContainer within sandbox \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:26:17.265792 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3093737592.mount: Deactivated successfully. Jul 15 11:26:17.269601 env[1217]: time="2025-07-15T11:26:17.269549065Z" level=info msg="CreateContainer within sandbox \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705\"" Jul 15 11:26:17.270743 env[1217]: time="2025-07-15T11:26:17.270714900Z" level=info msg="StartContainer for \"e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705\"" Jul 15 11:26:17.290167 systemd[1]: Started cri-containerd-e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705.scope. Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.320984 kernel: kauditd_printk_skb: 223 callbacks suppressed Jul 15 11:26:17.321035 kernel: audit: type=1400 audit(1752578777.319:1036): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2519 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:17.325109 kernel: audit: type=1300 audit(1752578777.319:1036): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2519 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:17.325163 kernel: audit: type=1327 audit(1752578777.319:1036): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376334313266343264316339666335313831373163323634366131 Jul 15 11:26:17.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376334313266343264316339666335313831373163323634366131 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.329138 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.329219 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.330858 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.333900 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.341346 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.341443 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.343236 kernel: audit: type=1400 audit(1752578777.319:1037): avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit: BPF prog-id=140 op=LOAD Jul 15 11:26:17.319000 audit[2707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2519 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:17.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376334313266343264316339666335313831373163323634366131 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit: BPF prog-id=141 op=LOAD Jul 15 11:26:17.319000 audit[2707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2519 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:17.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376334313266343264316339666335313831373163323634366131 Jul 15 11:26:17.319000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:26:17.319000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { perfmon } for pid=2707 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit[2707]: AVC avc: denied { bpf } for pid=2707 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:17.319000 audit: BPF prog-id=142 op=LOAD Jul 15 11:26:17.319000 audit[2707]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2519 pid=2707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:17.319000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530376334313266343264316339666335313831373163323634366131 Jul 15 11:26:17.381949 env[1217]: time="2025-07-15T11:26:17.381902838Z" level=info msg="StartContainer for \"e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705\" returns successfully" Jul 15 11:26:18.002802 env[1217]: time="2025-07-15T11:26:18.002749549Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:26:18.005142 systemd[1]: cri-containerd-e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705.scope: Deactivated successfully. Jul 15 11:26:18.011000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:26:18.022908 kubelet[1958]: I0715 11:26:18.022862 1958 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 15 11:26:18.033922 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705-rootfs.mount: Deactivated successfully. Jul 15 11:26:18.052761 env[1217]: time="2025-07-15T11:26:18.047749561Z" level=info msg="shim disconnected" id=e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705 Jul 15 11:26:18.052761 env[1217]: time="2025-07-15T11:26:18.047809727Z" level=warning msg="cleaning up after shim disconnected" id=e07c412f42d1c9fc518171c2646a1718ea9b91ae8b24ccea4ba128f743e78705 namespace=k8s.io Jul 15 11:26:18.052761 env[1217]: time="2025-07-15T11:26:18.047821088Z" level=info msg="cleaning up dead shim" Jul 15 11:26:18.066199 systemd[1]: Created slice kubepods-burstable-pod4a9557ee_7213_48c8_9ffc_d913ee220542.slice. Jul 15 11:26:18.075746 env[1217]: time="2025-07-15T11:26:18.074385679Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:26:18Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2749 runtime=io.containerd.runc.v2\ntime=\"2025-07-15T11:26:18Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Jul 15 11:26:18.081651 systemd[1]: Created slice kubepods-besteffort-pode4a0aa31_fd4c_491f_8b8a_5e3ff09d4148.slice. Jul 15 11:26:18.086660 systemd[1]: Created slice kubepods-besteffort-podae2ac006_70eb_4fa6_88cc_c3fd68d2d670.slice. Jul 15 11:26:18.090901 systemd[1]: Created slice kubepods-besteffort-pod5276840e_1028_40c8_aa96_d1965cf900f0.slice. Jul 15 11:26:18.096079 systemd[1]: Created slice kubepods-besteffort-pod5b9a14bd_0421_487f_b417_095ab5c611dc.slice. Jul 15 11:26:18.100239 systemd[1]: Created slice kubepods-besteffort-podd6467dfc_9bee_4f8c_a8cd_d2de95ce6517.slice. Jul 15 11:26:18.105539 systemd[1]: Created slice kubepods-burstable-podc919c5bb_fa83_4310_af91_85adfca12313.slice. Jul 15 11:26:18.125951 kubelet[1958]: I0715 11:26:18.125906 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-ca-bundle\") pod \"whisker-5c5cddb84f-rkk56\" (UID: \"5b9a14bd-0421-487f-b417-095ab5c611dc\") " pod="calico-system/whisker-5c5cddb84f-rkk56" Jul 15 11:26:18.126100 kubelet[1958]: I0715 11:26:18.125961 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ae2ac006-70eb-4fa6-88cc-c3fd68d2d670-tigera-ca-bundle\") pod \"calico-kube-controllers-744c4f5c87-8qkfz\" (UID: \"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670\") " pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" Jul 15 11:26:18.126100 kubelet[1958]: I0715 11:26:18.125984 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/d6467dfc-9bee-4f8c-a8cd-d2de95ce6517-goldmane-key-pair\") pod \"goldmane-768f4c5c69-4jcc2\" (UID: \"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517\") " pod="calico-system/goldmane-768f4c5c69-4jcc2" Jul 15 11:26:18.126100 kubelet[1958]: I0715 11:26:18.126002 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4a9557ee-7213-48c8-9ffc-d913ee220542-config-volume\") pod \"coredns-668d6bf9bc-jt247\" (UID: \"4a9557ee-7213-48c8-9ffc-d913ee220542\") " pod="kube-system/coredns-668d6bf9bc-jt247" Jul 15 11:26:18.126100 kubelet[1958]: I0715 11:26:18.126034 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m9c8z\" (UniqueName: \"kubernetes.io/projected/e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148-kube-api-access-m9c8z\") pod \"calico-apiserver-7c589bcf68-hrn2z\" (UID: \"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148\") " pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" Jul 15 11:26:18.126100 kubelet[1958]: I0715 11:26:18.126053 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/d6467dfc-9bee-4f8c-a8cd-d2de95ce6517-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-4jcc2\" (UID: \"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517\") " pod="calico-system/goldmane-768f4c5c69-4jcc2" Jul 15 11:26:18.126230 kubelet[1958]: I0715 11:26:18.126069 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rx9qr\" (UniqueName: \"kubernetes.io/projected/4a9557ee-7213-48c8-9ffc-d913ee220542-kube-api-access-rx9qr\") pod \"coredns-668d6bf9bc-jt247\" (UID: \"4a9557ee-7213-48c8-9ffc-d913ee220542\") " pod="kube-system/coredns-668d6bf9bc-jt247" Jul 15 11:26:18.126230 kubelet[1958]: I0715 11:26:18.126085 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-p9qmp\" (UniqueName: \"kubernetes.io/projected/d6467dfc-9bee-4f8c-a8cd-d2de95ce6517-kube-api-access-p9qmp\") pod \"goldmane-768f4c5c69-4jcc2\" (UID: \"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517\") " pod="calico-system/goldmane-768f4c5c69-4jcc2" Jul 15 11:26:18.126230 kubelet[1958]: I0715 11:26:18.126115 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/c919c5bb-fa83-4310-af91-85adfca12313-config-volume\") pod \"coredns-668d6bf9bc-jwj5w\" (UID: \"c919c5bb-fa83-4310-af91-85adfca12313\") " pod="kube-system/coredns-668d6bf9bc-jwj5w" Jul 15 11:26:18.126230 kubelet[1958]: I0715 11:26:18.126135 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148-calico-apiserver-certs\") pod \"calico-apiserver-7c589bcf68-hrn2z\" (UID: \"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148\") " pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" Jul 15 11:26:18.126230 kubelet[1958]: I0715 11:26:18.126151 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/d6467dfc-9bee-4f8c-a8cd-d2de95ce6517-config\") pod \"goldmane-768f4c5c69-4jcc2\" (UID: \"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517\") " pod="calico-system/goldmane-768f4c5c69-4jcc2" Jul 15 11:26:18.126424 kubelet[1958]: I0715 11:26:18.126179 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tnqrv\" (UniqueName: \"kubernetes.io/projected/ae2ac006-70eb-4fa6-88cc-c3fd68d2d670-kube-api-access-tnqrv\") pod \"calico-kube-controllers-744c4f5c87-8qkfz\" (UID: \"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670\") " pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" Jul 15 11:26:18.126424 kubelet[1958]: I0715 11:26:18.126198 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-m82dk\" (UniqueName: \"kubernetes.io/projected/c919c5bb-fa83-4310-af91-85adfca12313-kube-api-access-m82dk\") pod \"coredns-668d6bf9bc-jwj5w\" (UID: \"c919c5bb-fa83-4310-af91-85adfca12313\") " pod="kube-system/coredns-668d6bf9bc-jwj5w" Jul 15 11:26:18.126424 kubelet[1958]: I0715 11:26:18.126218 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-backend-key-pair\") pod \"whisker-5c5cddb84f-rkk56\" (UID: \"5b9a14bd-0421-487f-b417-095ab5c611dc\") " pod="calico-system/whisker-5c5cddb84f-rkk56" Jul 15 11:26:18.126424 kubelet[1958]: I0715 11:26:18.126233 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tl75q\" (UniqueName: \"kubernetes.io/projected/5276840e-1028-40c8-aa96-d1965cf900f0-kube-api-access-tl75q\") pod \"calico-apiserver-7c589bcf68-pc29s\" (UID: \"5276840e-1028-40c8-aa96-d1965cf900f0\") " pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" Jul 15 11:26:18.126424 kubelet[1958]: I0715 11:26:18.126261 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/5276840e-1028-40c8-aa96-d1965cf900f0-calico-apiserver-certs\") pod \"calico-apiserver-7c589bcf68-pc29s\" (UID: \"5276840e-1028-40c8-aa96-d1965cf900f0\") " pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" Jul 15 11:26:18.126544 kubelet[1958]: I0715 11:26:18.126281 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lhpp4\" (UniqueName: \"kubernetes.io/projected/5b9a14bd-0421-487f-b417-095ab5c611dc-kube-api-access-lhpp4\") pod \"whisker-5c5cddb84f-rkk56\" (UID: \"5b9a14bd-0421-487f-b417-095ab5c611dc\") " pod="calico-system/whisker-5c5cddb84f-rkk56" Jul 15 11:26:18.374802 kubelet[1958]: E0715 11:26:18.373829 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:18.375553 env[1217]: time="2025-07-15T11:26:18.375195988Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jt247,Uid:4a9557ee-7213-48c8-9ffc-d913ee220542,Namespace:kube-system,Attempt:0,}" Jul 15 11:26:18.384901 env[1217]: time="2025-07-15T11:26:18.384858941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-hrn2z,Uid:e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:26:18.391215 env[1217]: time="2025-07-15T11:26:18.391181098Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-744c4f5c87-8qkfz,Uid:ae2ac006-70eb-4fa6-88cc-c3fd68d2d670,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:18.400820 env[1217]: time="2025-07-15T11:26:18.398492469Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-pc29s,Uid:5276840e-1028-40c8-aa96-d1965cf900f0,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:26:18.400820 env[1217]: time="2025-07-15T11:26:18.398872025Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c5cddb84f-rkk56,Uid:5b9a14bd-0421-487f-b417-095ab5c611dc,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:18.412985 env[1217]: time="2025-07-15T11:26:18.412330897Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-4jcc2,Uid:d6467dfc-9bee-4f8c-a8cd-d2de95ce6517,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:18.413222 kubelet[1958]: E0715 11:26:18.412735 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:18.413330 env[1217]: time="2025-07-15T11:26:18.413295508Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jwj5w,Uid:c919c5bb-fa83-4310-af91-85adfca12313,Namespace:kube-system,Attempt:0,}" Jul 15 11:26:18.555874 systemd[1]: Created slice kubepods-besteffort-podf950f0d3_7bd4_45b0_9b8d_5674d38b8105.slice. Jul 15 11:26:18.576916 env[1217]: time="2025-07-15T11:26:18.576876488Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7vgn6,Uid:f950f0d3-7bd4-45b0-9b8d-5674d38b8105,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:18.640571 env[1217]: time="2025-07-15T11:26:18.640475939Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:26:18.759930 env[1217]: time="2025-07-15T11:26:18.759854181Z" level=error msg="Failed to destroy network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.760262 env[1217]: time="2025-07-15T11:26:18.760230496Z" level=error msg="encountered an error cleaning up failed sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.760310 env[1217]: time="2025-07-15T11:26:18.760282981Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-744c4f5c87-8qkfz,Uid:ae2ac006-70eb-4fa6-88cc-c3fd68d2d670,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.760542 kubelet[1958]: E0715 11:26:18.760499 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.761131 kubelet[1958]: E0715 11:26:18.761102 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" Jul 15 11:26:18.761194 kubelet[1958]: E0715 11:26:18.761141 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" Jul 15 11:26:18.761226 kubelet[1958]: E0715 11:26:18.761195 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-744c4f5c87-8qkfz_calico-system(ae2ac006-70eb-4fa6-88cc-c3fd68d2d670)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-744c4f5c87-8qkfz_calico-system(ae2ac006-70eb-4fa6-88cc-c3fd68d2d670)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" podUID="ae2ac006-70eb-4fa6-88cc-c3fd68d2d670" Jul 15 11:26:18.761546 env[1217]: time="2025-07-15T11:26:18.761509977Z" level=error msg="Failed to destroy network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.763030 env[1217]: time="2025-07-15T11:26:18.762985317Z" level=error msg="Failed to destroy network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.764019 env[1217]: time="2025-07-15T11:26:18.763979691Z" level=error msg="encountered an error cleaning up failed sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.764082 env[1217]: time="2025-07-15T11:26:18.764037736Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jt247,Uid:4a9557ee-7213-48c8-9ffc-d913ee220542,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.764245 kubelet[1958]: E0715 11:26:18.764213 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.764298 kubelet[1958]: E0715 11:26:18.764260 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-jt247" Jul 15 11:26:18.764298 kubelet[1958]: E0715 11:26:18.764286 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-jt247" Jul 15 11:26:18.764353 kubelet[1958]: E0715 11:26:18.764326 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-jt247_kube-system(4a9557ee-7213-48c8-9ffc-d913ee220542)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-jt247_kube-system(4a9557ee-7213-48c8-9ffc-d913ee220542)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-jt247" podUID="4a9557ee-7213-48c8-9ffc-d913ee220542" Jul 15 11:26:18.765086 env[1217]: time="2025-07-15T11:26:18.765047552Z" level=error msg="encountered an error cleaning up failed sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.765231 env[1217]: time="2025-07-15T11:26:18.765204606Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-hrn2z,Uid:e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.766152 kubelet[1958]: E0715 11:26:18.766125 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.766219 kubelet[1958]: E0715 11:26:18.766162 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" Jul 15 11:26:18.766219 kubelet[1958]: E0715 11:26:18.766177 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" Jul 15 11:26:18.766282 kubelet[1958]: E0715 11:26:18.766210 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7c589bcf68-hrn2z_calico-apiserver(e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7c589bcf68-hrn2z_calico-apiserver(e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" podUID="e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148" Jul 15 11:26:18.767248 env[1217]: time="2025-07-15T11:26:18.767211796Z" level=error msg="Failed to destroy network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.768543 env[1217]: time="2025-07-15T11:26:18.768502358Z" level=error msg="encountered an error cleaning up failed sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.768591 env[1217]: time="2025-07-15T11:26:18.768560244Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-pc29s,Uid:5276840e-1028-40c8-aa96-d1965cf900f0,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.768790 kubelet[1958]: E0715 11:26:18.768761 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.768831 kubelet[1958]: E0715 11:26:18.768801 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" Jul 15 11:26:18.768831 kubelet[1958]: E0715 11:26:18.768817 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" Jul 15 11:26:18.768888 kubelet[1958]: E0715 11:26:18.768849 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-7c589bcf68-pc29s_calico-apiserver(5276840e-1028-40c8-aa96-d1965cf900f0)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-7c589bcf68-pc29s_calico-apiserver(5276840e-1028-40c8-aa96-d1965cf900f0)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" podUID="5276840e-1028-40c8-aa96-d1965cf900f0" Jul 15 11:26:18.771853 env[1217]: time="2025-07-15T11:26:18.771781988Z" level=error msg="Failed to destroy network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.772234 env[1217]: time="2025-07-15T11:26:18.772197307Z" level=error msg="encountered an error cleaning up failed sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.772309 env[1217]: time="2025-07-15T11:26:18.772245312Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jwj5w,Uid:c919c5bb-fa83-4310-af91-85adfca12313,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.772413 kubelet[1958]: E0715 11:26:18.772383 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.772484 kubelet[1958]: E0715 11:26:18.772423 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-jwj5w" Jul 15 11:26:18.772484 kubelet[1958]: E0715 11:26:18.772444 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-jwj5w" Jul 15 11:26:18.772578 kubelet[1958]: E0715 11:26:18.772483 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-jwj5w_kube-system(c919c5bb-fa83-4310-af91-85adfca12313)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-jwj5w_kube-system(c919c5bb-fa83-4310-af91-85adfca12313)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-jwj5w" podUID="c919c5bb-fa83-4310-af91-85adfca12313" Jul 15 11:26:18.777955 env[1217]: time="2025-07-15T11:26:18.777897606Z" level=error msg="Failed to destroy network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.778314 env[1217]: time="2025-07-15T11:26:18.778274162Z" level=error msg="encountered an error cleaning up failed sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.778370 env[1217]: time="2025-07-15T11:26:18.778329087Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5c5cddb84f-rkk56,Uid:5b9a14bd-0421-487f-b417-095ab5c611dc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.778546 kubelet[1958]: E0715 11:26:18.778510 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.778593 kubelet[1958]: E0715 11:26:18.778559 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5c5cddb84f-rkk56" Jul 15 11:26:18.778593 kubelet[1958]: E0715 11:26:18.778581 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-5c5cddb84f-rkk56" Jul 15 11:26:18.778660 kubelet[1958]: E0715 11:26:18.778614 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-5c5cddb84f-rkk56_calico-system(5b9a14bd-0421-487f-b417-095ab5c611dc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-5c5cddb84f-rkk56_calico-system(5b9a14bd-0421-487f-b417-095ab5c611dc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5c5cddb84f-rkk56" podUID="5b9a14bd-0421-487f-b417-095ab5c611dc" Jul 15 11:26:18.789948 env[1217]: time="2025-07-15T11:26:18.789881699Z" level=error msg="Failed to destroy network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.790421 env[1217]: time="2025-07-15T11:26:18.790373785Z" level=error msg="encountered an error cleaning up failed sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.790594 env[1217]: time="2025-07-15T11:26:18.790565363Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-4jcc2,Uid:d6467dfc-9bee-4f8c-a8cd-d2de95ce6517,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.790935 kubelet[1958]: E0715 11:26:18.790883 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.791014 kubelet[1958]: E0715 11:26:18.790944 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-4jcc2" Jul 15 11:26:18.791014 kubelet[1958]: E0715 11:26:18.790963 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-4jcc2" Jul 15 11:26:18.791071 kubelet[1958]: E0715 11:26:18.791004 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-4jcc2_calico-system(d6467dfc-9bee-4f8c-a8cd-d2de95ce6517)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-4jcc2_calico-system(d6467dfc-9bee-4f8c-a8cd-d2de95ce6517)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-4jcc2" podUID="d6467dfc-9bee-4f8c-a8cd-d2de95ce6517" Jul 15 11:26:18.792532 env[1217]: time="2025-07-15T11:26:18.792496266Z" level=error msg="Failed to destroy network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.792937 env[1217]: time="2025-07-15T11:26:18.792901464Z" level=error msg="encountered an error cleaning up failed sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.793061 env[1217]: time="2025-07-15T11:26:18.793031476Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7vgn6,Uid:f950f0d3-7bd4-45b0-9b8d-5674d38b8105,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.793324 kubelet[1958]: E0715 11:26:18.793274 1958 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:18.793505 kubelet[1958]: E0715 11:26:18.793320 1958 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:18.793505 kubelet[1958]: E0715 11:26:18.793342 1958 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-7vgn6" Jul 15 11:26:18.793505 kubelet[1958]: E0715 11:26:18.793466 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-7vgn6_calico-system(f950f0d3-7bd4-45b0-9b8d-5674d38b8105)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-7vgn6_calico-system(f950f0d3-7bd4-45b0-9b8d-5674d38b8105)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7vgn6" podUID="f950f0d3-7bd4-45b0-9b8d-5674d38b8105" Jul 15 11:26:19.264502 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16-shm.mount: Deactivated successfully. Jul 15 11:26:19.264591 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa-shm.mount: Deactivated successfully. Jul 15 11:26:19.636942 kubelet[1958]: I0715 11:26:19.636819 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:19.639316 env[1217]: time="2025-07-15T11:26:19.639241011Z" level=info msg="StopPodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\"" Jul 15 11:26:19.639587 kubelet[1958]: I0715 11:26:19.639556 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:19.640441 env[1217]: time="2025-07-15T11:26:19.640415198Z" level=info msg="StopPodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\"" Jul 15 11:26:19.640997 kubelet[1958]: I0715 11:26:19.640965 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:19.643027 kubelet[1958]: I0715 11:26:19.642873 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:19.644586 env[1217]: time="2025-07-15T11:26:19.644476327Z" level=info msg="StopPodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\"" Jul 15 11:26:19.644848 env[1217]: time="2025-07-15T11:26:19.644816277Z" level=info msg="StopPodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\"" Jul 15 11:26:19.646883 kubelet[1958]: I0715 11:26:19.646553 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:19.647925 env[1217]: time="2025-07-15T11:26:19.647900598Z" level=info msg="StopPodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\"" Jul 15 11:26:19.650336 kubelet[1958]: I0715 11:26:19.650130 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:19.650914 env[1217]: time="2025-07-15T11:26:19.650877948Z" level=info msg="StopPodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\"" Jul 15 11:26:19.652707 kubelet[1958]: I0715 11:26:19.652672 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:19.653274 env[1217]: time="2025-07-15T11:26:19.653244963Z" level=info msg="StopPodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\"" Jul 15 11:26:19.657154 kubelet[1958]: I0715 11:26:19.657127 1958 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:19.658097 env[1217]: time="2025-07-15T11:26:19.658068002Z" level=info msg="StopPodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\"" Jul 15 11:26:19.679917 env[1217]: time="2025-07-15T11:26:19.679867023Z" level=error msg="StopPodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" failed" error="failed to destroy network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.681631 kubelet[1958]: E0715 11:26:19.681587 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:19.682984 kubelet[1958]: E0715 11:26:19.682930 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc"} Jul 15 11:26:19.683039 kubelet[1958]: E0715 11:26:19.683002 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c919c5bb-fa83-4310-af91-85adfca12313\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.683112 kubelet[1958]: E0715 11:26:19.683027 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c919c5bb-fa83-4310-af91-85adfca12313\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-jwj5w" podUID="c919c5bb-fa83-4310-af91-85adfca12313" Jul 15 11:26:19.693007 env[1217]: time="2025-07-15T11:26:19.692950292Z" level=error msg="StopPodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" failed" error="failed to destroy network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.693592 kubelet[1958]: E0715 11:26:19.693548 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:19.693680 kubelet[1958]: E0715 11:26:19.693595 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0"} Jul 15 11:26:19.693680 kubelet[1958]: E0715 11:26:19.693629 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.693680 kubelet[1958]: E0715 11:26:19.693649 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" podUID="ae2ac006-70eb-4fa6-88cc-c3fd68d2d670" Jul 15 11:26:19.722510 env[1217]: time="2025-07-15T11:26:19.722453133Z" level=error msg="StopPodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" failed" error="failed to destroy network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.722771 kubelet[1958]: E0715 11:26:19.722705 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:19.722771 kubelet[1958]: E0715 11:26:19.722756 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa"} Jul 15 11:26:19.722927 kubelet[1958]: E0715 11:26:19.722790 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4a9557ee-7213-48c8-9ffc-d913ee220542\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.722927 kubelet[1958]: E0715 11:26:19.722810 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4a9557ee-7213-48c8-9ffc-d913ee220542\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-jt247" podUID="4a9557ee-7213-48c8-9ffc-d913ee220542" Jul 15 11:26:19.724634 env[1217]: time="2025-07-15T11:26:19.723231364Z" level=error msg="StopPodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" failed" error="failed to destroy network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.724871 env[1217]: time="2025-07-15T11:26:19.723855781Z" level=error msg="StopPodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" failed" error="failed to destroy network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.725105 kubelet[1958]: E0715 11:26:19.725070 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:19.725167 kubelet[1958]: E0715 11:26:19.725115 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10"} Jul 15 11:26:19.725167 kubelet[1958]: E0715 11:26:19.725146 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5276840e-1028-40c8-aa96-d1965cf900f0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.725249 kubelet[1958]: E0715 11:26:19.725174 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5276840e-1028-40c8-aa96-d1965cf900f0\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" podUID="5276840e-1028-40c8-aa96-d1965cf900f0" Jul 15 11:26:19.725249 kubelet[1958]: E0715 11:26:19.725201 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:19.725249 kubelet[1958]: E0715 11:26:19.725215 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd"} Jul 15 11:26:19.725249 kubelet[1958]: E0715 11:26:19.725232 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5b9a14bd-0421-487f-b417-095ab5c611dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.725378 kubelet[1958]: E0715 11:26:19.725246 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5b9a14bd-0421-487f-b417-095ab5c611dc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-5c5cddb84f-rkk56" podUID="5b9a14bd-0421-487f-b417-095ab5c611dc" Jul 15 11:26:19.729056 env[1217]: time="2025-07-15T11:26:19.726245278Z" level=error msg="StopPodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" failed" error="failed to destroy network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.729056 env[1217]: time="2025-07-15T11:26:19.727499592Z" level=error msg="StopPodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" failed" error="failed to destroy network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.729188 kubelet[1958]: E0715 11:26:19.726846 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:19.729188 kubelet[1958]: E0715 11:26:19.726880 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4"} Jul 15 11:26:19.729188 kubelet[1958]: E0715 11:26:19.726907 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.729188 kubelet[1958]: E0715 11:26:19.726927 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-4jcc2" podUID="d6467dfc-9bee-4f8c-a8cd-d2de95ce6517" Jul 15 11:26:19.729327 kubelet[1958]: E0715 11:26:19.727832 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:19.729327 kubelet[1958]: E0715 11:26:19.727865 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16"} Jul 15 11:26:19.729327 kubelet[1958]: E0715 11:26:19.728102 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.729327 kubelet[1958]: E0715 11:26:19.728129 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" podUID="e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148" Jul 15 11:26:19.748620 env[1217]: time="2025-07-15T11:26:19.748564466Z" level=error msg="StopPodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" failed" error="failed to destroy network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:26:19.749309 kubelet[1958]: E0715 11:26:19.749231 1958 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:19.749475 kubelet[1958]: E0715 11:26:19.749308 1958 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a"} Jul 15 11:26:19.749514 kubelet[1958]: E0715 11:26:19.749484 1958 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:26:19.749563 kubelet[1958]: E0715 11:26:19.749507 1958 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"f950f0d3-7bd4-45b0-9b8d-5674d38b8105\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-7vgn6" podUID="f950f0d3-7bd4-45b0-9b8d-5674d38b8105" Jul 15 11:26:23.816773 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount250716921.mount: Deactivated successfully. Jul 15 11:26:23.984051 env[1217]: time="2025-07-15T11:26:23.984002503Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:24.023707 env[1217]: time="2025-07-15T11:26:24.023519065Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:24.029808 env[1217]: time="2025-07-15T11:26:24.029768939Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:24.033791 env[1217]: time="2025-07-15T11:26:24.033752521Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:24.034335 env[1217]: time="2025-07-15T11:26:24.034300283Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:1c6ddca599ddd18c061e797a7830b0aea985f8b023c5e43d815a9ed1088893a9\"" Jul 15 11:26:24.049080 env[1217]: time="2025-07-15T11:26:24.049026600Z" level=info msg="CreateContainer within sandbox \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:26:24.076554 env[1217]: time="2025-07-15T11:26:24.076462882Z" level=info msg="CreateContainer within sandbox \"d15e9f60e6d40380aa38c848d56326074ac5e6af5967a1e6d06a89b42a56e4d3\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"9847bc696750ab7fa13752375e7d5e7b3bc433bdc873560578b233852297c111\"" Jul 15 11:26:24.077245 env[1217]: time="2025-07-15T11:26:24.077201818Z" level=info msg="StartContainer for \"9847bc696750ab7fa13752375e7d5e7b3bc433bdc873560578b233852297c111\"" Jul 15 11:26:24.094220 systemd[1]: Started cri-containerd-9847bc696750ab7fa13752375e7d5e7b3bc433bdc873560578b233852297c111.scope. Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.150104 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 15 11:26:24.150156 kernel: audit: type=1400 audit(1752578784.148:1043): avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2519 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:24.154390 kernel: audit: type=1300 audit(1752578784.148:1043): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=2519 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:24.154437 kernel: audit: type=1327 audit(1752578784.148:1043): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343762633639363735306162376661313337353233373565376435 Jul 15 11:26:24.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343762633639363735306162376661313337353233373565376435 Jul 15 11:26:24.156742 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.160062 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.161920 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.164491 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.164562 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.168988 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.170695 kernel: audit: type=1400 audit(1752578784.148:1044): avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.148000 audit: BPF prog-id=143 op=LOAD Jul 15 11:26:24.148000 audit[3197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=2519 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:24.148000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343762633639363735306162376661313337353233373565376435 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.149000 audit: BPF prog-id=144 op=LOAD Jul 15 11:26:24.149000 audit[3197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=2519 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:24.149000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343762633639363735306162376661313337353233373565376435 Jul 15 11:26:24.151000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:26:24.151000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { perfmon } for pid=3197 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit[3197]: AVC avc: denied { bpf } for pid=3197 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:24.151000 audit: BPF prog-id=145 op=LOAD Jul 15 11:26:24.151000 audit[3197]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=2519 pid=3197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:24.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938343762633639363735306162376661313337353233373565376435 Jul 15 11:26:24.176401 env[1217]: time="2025-07-15T11:26:24.176359100Z" level=info msg="StartContainer for \"9847bc696750ab7fa13752375e7d5e7b3bc433bdc873560578b233852297c111\" returns successfully" Jul 15 11:26:24.369793 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:26:24.369963 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:26:24.457127 env[1217]: time="2025-07-15T11:26:24.457070197Z" level=info msg="StopPodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\"" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.557 [INFO][3253] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.559 [INFO][3253] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" iface="eth0" netns="/var/run/netns/cni-f04a3803-a514-f40e-9029-8580879bcaf5" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.560 [INFO][3253] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" iface="eth0" netns="/var/run/netns/cni-f04a3803-a514-f40e-9029-8580879bcaf5" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.562 [INFO][3253] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" iface="eth0" netns="/var/run/netns/cni-f04a3803-a514-f40e-9029-8580879bcaf5" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.562 [INFO][3253] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.562 [INFO][3253] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.635 [INFO][3263] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.635 [INFO][3263] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.635 [INFO][3263] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.643 [WARNING][3263] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.643 [INFO][3263] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.644 [INFO][3263] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:24.647871 env[1217]: 2025-07-15 11:26:24.646 [INFO][3253] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:24.648385 env[1217]: time="2025-07-15T11:26:24.648001922Z" level=info msg="TearDown network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" successfully" Jul 15 11:26:24.648385 env[1217]: time="2025-07-15T11:26:24.648040925Z" level=info msg="StopPodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" returns successfully" Jul 15 11:26:24.682667 kubelet[1958]: I0715 11:26:24.682627 1958 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-lhpp4\" (UniqueName: \"kubernetes.io/projected/5b9a14bd-0421-487f-b417-095ab5c611dc-kube-api-access-lhpp4\") pod \"5b9a14bd-0421-487f-b417-095ab5c611dc\" (UID: \"5b9a14bd-0421-487f-b417-095ab5c611dc\") " Jul 15 11:26:24.682667 kubelet[1958]: I0715 11:26:24.682669 1958 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-ca-bundle\") pod \"5b9a14bd-0421-487f-b417-095ab5c611dc\" (UID: \"5b9a14bd-0421-487f-b417-095ab5c611dc\") " Jul 15 11:26:24.683070 kubelet[1958]: I0715 11:26:24.682729 1958 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-backend-key-pair\") pod \"5b9a14bd-0421-487f-b417-095ab5c611dc\" (UID: \"5b9a14bd-0421-487f-b417-095ab5c611dc\") " Jul 15 11:26:24.684351 kubelet[1958]: I0715 11:26:24.683781 1958 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "5b9a14bd-0421-487f-b417-095ab5c611dc" (UID: "5b9a14bd-0421-487f-b417-095ab5c611dc"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 15 11:26:24.693791 kubelet[1958]: I0715 11:26:24.693746 1958 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/5b9a14bd-0421-487f-b417-095ab5c611dc-kube-api-access-lhpp4" (OuterVolumeSpecName: "kube-api-access-lhpp4") pod "5b9a14bd-0421-487f-b417-095ab5c611dc" (UID: "5b9a14bd-0421-487f-b417-095ab5c611dc"). InnerVolumeSpecName "kube-api-access-lhpp4". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:26:24.694454 kubelet[1958]: I0715 11:26:24.694429 1958 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "5b9a14bd-0421-487f-b417-095ab5c611dc" (UID: "5b9a14bd-0421-487f-b417-095ab5c611dc"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:26:24.783592 kubelet[1958]: I0715 11:26:24.783227 1958 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:26:24.783592 kubelet[1958]: I0715 11:26:24.783478 1958 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-lhpp4\" (UniqueName: \"kubernetes.io/projected/5b9a14bd-0421-487f-b417-095ab5c611dc-kube-api-access-lhpp4\") on node \"localhost\" DevicePath \"\"" Jul 15 11:26:24.783592 kubelet[1958]: I0715 11:26:24.783492 1958 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5b9a14bd-0421-487f-b417-095ab5c611dc-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:26:24.817642 systemd[1]: run-netns-cni\x2df04a3803\x2da514\x2df40e\x2d9029\x2d8580879bcaf5.mount: Deactivated successfully. Jul 15 11:26:24.817745 systemd[1]: var-lib-kubelet-pods-5b9a14bd\x2d0421\x2d487f\x2db417\x2d095ab5c611dc-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dlhpp4.mount: Deactivated successfully. Jul 15 11:26:24.817834 systemd[1]: var-lib-kubelet-pods-5b9a14bd\x2d0421\x2d487f\x2db417\x2d095ab5c611dc-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:26:24.974823 systemd[1]: Removed slice kubepods-besteffort-pod5b9a14bd_0421_487f_b417_095ab5c611dc.slice. Jul 15 11:26:24.985819 kubelet[1958]: I0715 11:26:24.985759 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-2btbq" podStartSLOduration=1.844859557 podStartE2EDuration="14.985743664s" podCreationTimestamp="2025-07-15 11:26:10 +0000 UTC" firstStartedPulling="2025-07-15 11:26:10.8942566 +0000 UTC m=+19.442620504" lastFinishedPulling="2025-07-15 11:26:24.035140747 +0000 UTC m=+32.583504611" observedRunningTime="2025-07-15 11:26:24.687807341 +0000 UTC m=+33.236171245" watchObservedRunningTime="2025-07-15 11:26:24.985743664 +0000 UTC m=+33.534107528" Jul 15 11:26:25.013382 systemd[1]: Created slice kubepods-besteffort-pod8b6f362a_62fe_45d6_903d_96956feae855.slice. Jul 15 11:26:25.085706 kubelet[1958]: I0715 11:26:25.085554 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pm48g\" (UniqueName: \"kubernetes.io/projected/8b6f362a-62fe-45d6-903d-96956feae855-kube-api-access-pm48g\") pod \"whisker-79d7bcccf-f8lkr\" (UID: \"8b6f362a-62fe-45d6-903d-96956feae855\") " pod="calico-system/whisker-79d7bcccf-f8lkr" Jul 15 11:26:25.085706 kubelet[1958]: I0715 11:26:25.085598 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/8b6f362a-62fe-45d6-903d-96956feae855-whisker-backend-key-pair\") pod \"whisker-79d7bcccf-f8lkr\" (UID: \"8b6f362a-62fe-45d6-903d-96956feae855\") " pod="calico-system/whisker-79d7bcccf-f8lkr" Jul 15 11:26:25.085706 kubelet[1958]: I0715 11:26:25.085615 1958 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8b6f362a-62fe-45d6-903d-96956feae855-whisker-ca-bundle\") pod \"whisker-79d7bcccf-f8lkr\" (UID: \"8b6f362a-62fe-45d6-903d-96956feae855\") " pod="calico-system/whisker-79d7bcccf-f8lkr" Jul 15 11:26:25.317558 env[1217]: time="2025-07-15T11:26:25.317512936Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-79d7bcccf-f8lkr,Uid:8b6f362a-62fe-45d6-903d-96956feae855,Namespace:calico-system,Attempt:0,}" Jul 15 11:26:25.429220 systemd-networkd[1043]: cali92845d36b4b: Link UP Jul 15 11:26:25.431236 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:26:25.431320 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali92845d36b4b: link becomes ready Jul 15 11:26:25.431267 systemd-networkd[1043]: cali92845d36b4b: Gained carrier Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.349 [INFO][3308] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.362 [INFO][3308] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--79d7bcccf--f8lkr-eth0 whisker-79d7bcccf- calico-system 8b6f362a-62fe-45d6-903d-96956feae855 891 0 2025-07-15 11:26:25 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:79d7bcccf projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-79d7bcccf-f8lkr eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali92845d36b4b [] [] }} ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.362 [INFO][3308] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.386 [INFO][3324] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" HandleID="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Workload="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.386 [INFO][3324] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" HandleID="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Workload="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001377c0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-79d7bcccf-f8lkr", "timestamp":"2025-07-15 11:26:25.386145894 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.386 [INFO][3324] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.386 [INFO][3324] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.386 [INFO][3324] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.396 [INFO][3324] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.402 [INFO][3324] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.407 [INFO][3324] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.409 [INFO][3324] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.410 [INFO][3324] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.411 [INFO][3324] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.412 [INFO][3324] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.415 [INFO][3324] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.420 [INFO][3324] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.420 [INFO][3324] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" host="localhost" Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.420 [INFO][3324] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:25.449641 env[1217]: 2025-07-15 11:26:25.420 [INFO][3324] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" HandleID="k8s-pod-network.3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Workload="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.450253 env[1217]: 2025-07-15 11:26:25.422 [INFO][3308] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--79d7bcccf--f8lkr-eth0", GenerateName:"whisker-79d7bcccf-", Namespace:"calico-system", SelfLink:"", UID:"8b6f362a-62fe-45d6-903d-96956feae855", ResourceVersion:"891", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"79d7bcccf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-79d7bcccf-f8lkr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali92845d36b4b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:25.450253 env[1217]: 2025-07-15 11:26:25.422 [INFO][3308] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.450253 env[1217]: 2025-07-15 11:26:25.422 [INFO][3308] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali92845d36b4b ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.450253 env[1217]: 2025-07-15 11:26:25.431 [INFO][3308] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.450253 env[1217]: 2025-07-15 11:26:25.431 [INFO][3308] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--79d7bcccf--f8lkr-eth0", GenerateName:"whisker-79d7bcccf-", Namespace:"calico-system", SelfLink:"", UID:"8b6f362a-62fe-45d6-903d-96956feae855", ResourceVersion:"891", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 25, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"79d7bcccf", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa", Pod:"whisker-79d7bcccf-f8lkr", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali92845d36b4b", MAC:"52:dc:e7:4d:c3:98", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:25.450253 env[1217]: 2025-07-15 11:26:25.442 [INFO][3308] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa" Namespace="calico-system" Pod="whisker-79d7bcccf-f8lkr" WorkloadEndpoint="localhost-k8s-whisker--79d7bcccf--f8lkr-eth0" Jul 15 11:26:25.458285 env[1217]: time="2025-07-15T11:26:25.458214584Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:25.458285 env[1217]: time="2025-07-15T11:26:25.458253307Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:25.458285 env[1217]: time="2025-07-15T11:26:25.458268788Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:25.458471 env[1217]: time="2025-07-15T11:26:25.458419959Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa pid=3347 runtime=io.containerd.runc.v2 Jul 15 11:26:25.468182 systemd[1]: Started cri-containerd-3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa.scope. Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.485000 audit: BPF prog-id=146 op=LOAD Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=3347 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383939353135353638386137613237336438323231646533623639 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=3347 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383939353135353638386137613237336438323231646533623639 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit: BPF prog-id=147 op=LOAD Jul 15 11:26:25.486000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=3347 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383939353135353638386137613237336438323231646533623639 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit: BPF prog-id=148 op=LOAD Jul 15 11:26:25.486000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=3347 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383939353135353638386137613237336438323231646533623639 Jul 15 11:26:25.486000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:26:25.486000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { perfmon } for pid=3356 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit[3356]: AVC avc: denied { bpf } for pid=3356 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:25.486000 audit: BPF prog-id=149 op=LOAD Jul 15 11:26:25.486000 audit[3356]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=3347 pid=3356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.486000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363383939353135353638386137613237336438323231646533623639 Jul 15 11:26:25.489025 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:25.507767 env[1217]: time="2025-07-15T11:26:25.507729378Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-79d7bcccf-f8lkr,Uid:8b6f362a-62fe-45d6-903d-96956feae855,Namespace:calico-system,Attempt:0,} returns sandbox id \"3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa\"" Jul 15 11:26:25.509266 env[1217]: time="2025-07-15T11:26:25.509231649Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:26:25.553125 kubelet[1958]: I0715 11:26:25.553090 1958 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="5b9a14bd-0421-487f-b417-095ab5c611dc" path="/var/lib/kubelet/pods/5b9a14bd-0421-487f-b417-095ab5c611dc/volumes" Jul 15 11:26:25.775000 audit[3446]: AVC avc: denied { write } for pid=3446 comm="tee" name="fd" dev="proc" ino=19284 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.775000 audit[3446]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffffea487e5 a2=241 a3=1b6 items=1 ppid=3412 pid=3446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.775000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:26:25.775000 audit: PATH item=0 name="/dev/fd/63" inode=19275 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.775000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:25.776000 audit[3458]: AVC avc: denied { write } for pid=3458 comm="tee" name="fd" dev="proc" ino=19288 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.776000 audit[3458]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff34de7e5 a2=241 a3=1b6 items=1 ppid=3422 pid=3458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.776000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:26:25.776000 audit: PATH item=0 name="/dev/fd/63" inode=19278 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:25.780000 audit[3482]: AVC avc: denied { write } for pid=3482 comm="tee" name="fd" dev="proc" ino=18427 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.780000 audit[3482]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff12aa7e6 a2=241 a3=1b6 items=1 ppid=3441 pid=3482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.780000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:26:25.780000 audit: PATH item=0 name="/dev/fd/63" inode=19715 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.780000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:25.783000 audit[3472]: AVC avc: denied { write } for pid=3472 comm="tee" name="fd" dev="proc" ino=19294 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.783000 audit[3472]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffec5137e7 a2=241 a3=1b6 items=1 ppid=3420 pid=3472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.783000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:26:25.783000 audit: PATH item=0 name="/dev/fd/63" inode=19281 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.783000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:25.784000 audit[3470]: AVC avc: denied { write } for pid=3470 comm="tee" name="fd" dev="proc" ino=19298 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.784000 audit[3470]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=ffffe8dd17d5 a2=241 a3=1b6 items=1 ppid=3413 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.784000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:26:25.784000 audit: PATH item=0 name="/dev/fd/63" inode=19714 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.784000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:25.793000 audit[3476]: AVC avc: denied { write } for pid=3476 comm="tee" name="fd" dev="proc" ino=19304 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.793000 audit[3476]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff80267d6 a2=241 a3=1b6 items=1 ppid=3419 pid=3476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.793000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:26:25.793000 audit: PATH item=0 name="/dev/fd/63" inode=20610 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.793000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:25.799000 audit[3490]: AVC avc: denied { write } for pid=3490 comm="tee" name="fd" dev="proc" ino=19718 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:26:25.799000 audit[3490]: SYSCALL arch=c00000b7 syscall=56 success=yes exit=3 a0=ffffffffffffff9c a1=fffff78dc7e5 a2=241 a3=1b6 items=1 ppid=3414 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:25.799000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:26:25.799000 audit: PATH item=0 name="/dev/fd/63" inode=20611 dev=00:0b mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:25.799000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:26:26.528839 systemd-networkd[1043]: cali92845d36b4b: Gained IPv6LL Jul 15 11:26:26.713287 systemd[1]: run-containerd-runc-k8s.io-9847bc696750ab7fa13752375e7d5e7b3bc433bdc873560578b233852297c111-runc.SSYJNq.mount: Deactivated successfully. Jul 15 11:26:26.959458 env[1217]: time="2025-07-15T11:26:26.959414924Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:26.961617 env[1217]: time="2025-07-15T11:26:26.961580198Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:26.963429 env[1217]: time="2025-07-15T11:26:26.963399567Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:26.965243 env[1217]: time="2025-07-15T11:26:26.965198615Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:26.965888 env[1217]: time="2025-07-15T11:26:26.965854942Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:309942601a9ca6c4e92bcd09162824fef1c137a5c5d92fbbb45be0f29bfd1817\"" Jul 15 11:26:26.968048 env[1217]: time="2025-07-15T11:26:26.968011855Z" level=info msg="CreateContainer within sandbox \"3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:26:26.978730 env[1217]: time="2025-07-15T11:26:26.978609048Z" level=info msg="CreateContainer within sandbox \"3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"dd78ce49ccd646f272ceb948eb47f940ca9b7c143f8108c0fb5133e23c170168\"" Jul 15 11:26:26.979487 env[1217]: time="2025-07-15T11:26:26.979461229Z" level=info msg="StartContainer for \"dd78ce49ccd646f272ceb948eb47f940ca9b7c143f8108c0fb5133e23c170168\"" Jul 15 11:26:27.002357 systemd[1]: Started cri-containerd-dd78ce49ccd646f272ceb948eb47f940ca9b7c143f8108c0fb5133e23c170168.scope. Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.030000 audit: BPF prog-id=150 op=LOAD Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=3347 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:27.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464373863653439636364363436663237326365623934386562343766 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=3347 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:27.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464373863653439636364363436663237326365623934386562343766 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit: BPF prog-id=151 op=LOAD Jul 15 11:26:27.031000 audit[3559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=3347 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:27.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464373863653439636364363436663237326365623934386562343766 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit: BPF prog-id=152 op=LOAD Jul 15 11:26:27.031000 audit[3559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=3347 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:27.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464373863653439636364363436663237326365623934386562343766 Jul 15 11:26:27.031000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:26:27.031000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:27.031000 audit: BPF prog-id=153 op=LOAD Jul 15 11:26:27.031000 audit[3559]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=3347 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:27.031000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464373863653439636364363436663237326365623934386562343766 Jul 15 11:26:27.054020 env[1217]: time="2025-07-15T11:26:27.053974973Z" level=info msg="StartContainer for \"dd78ce49ccd646f272ceb948eb47f940ca9b7c143f8108c0fb5133e23c170168\" returns successfully" Jul 15 11:26:27.055340 env[1217]: time="2025-07-15T11:26:27.055235300Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:26:27.070000 audit[3569]: AVC avc: denied { search } for pid=3569 comm="nginx" name="crypto" dev="proc" ino=19422 scontext=system_u:system_r:svirt_lxc_net_t:s0:c700,c875 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:26:27.070000 audit[3569]: SYSCALL arch=c00000b7 syscall=56 success=no exit=-13 a0=ffffffffffffff9c a1=ffffbc759958 a2=0 a3=0 items=0 ppid=3347 pid=3569 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c700,c875 key=(null) Jul 15 11:26:27.070000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:26:27.501893 systemd[1]: Started sshd@7-10.0.0.138:22-10.0.0.1:39110.service. Jul 15 11:26:27.500000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.138:22-10.0.0.1:39110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:27.550000 audit[3589]: USER_ACCT pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:27.552167 sshd[3589]: Accepted publickey for core from 10.0.0.1 port 39110 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:27.552000 audit[3589]: CRED_ACQ pid=3589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:27.552000 audit[3589]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc840aae0 a2=3 a3=1 items=0 ppid=1 pid=3589 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:27.552000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:27.554219 sshd[3589]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:27.557910 systemd-logind[1204]: New session 8 of user core. Jul 15 11:26:27.558310 systemd[1]: Started session-8.scope. Jul 15 11:26:27.560000 audit[3589]: USER_START pid=3589 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:27.561000 audit[3591]: CRED_ACQ pid=3591 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:27.712688 sshd[3589]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:27.711000 audit[3589]: USER_END pid=3589 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:27.712000 audit[3589]: CRED_DISP pid=3589 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:27.715289 systemd-logind[1204]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:26:27.715461 systemd[1]: sshd@7-10.0.0.138:22-10.0.0.1:39110.service: Deactivated successfully. Jul 15 11:26:27.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.138:22-10.0.0.1:39110 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:27.716204 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:26:27.716917 systemd-logind[1204]: Removed session 8. Jul 15 11:26:29.008582 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1383706186.mount: Deactivated successfully. Jul 15 11:26:29.029346 env[1217]: time="2025-07-15T11:26:29.029292223Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:29.030719 env[1217]: time="2025-07-15T11:26:29.030675113Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:29.032167 env[1217]: time="2025-07-15T11:26:29.032134928Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:29.033371 env[1217]: time="2025-07-15T11:26:29.033338486Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:29.034022 env[1217]: time="2025-07-15T11:26:29.033975767Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:8763d908c0cd23d0e87bc61ce1ba8371b86449688baf955e5eeff7f7d7e101c4\"" Jul 15 11:26:29.036365 env[1217]: time="2025-07-15T11:26:29.036328120Z" level=info msg="CreateContainer within sandbox \"3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:26:29.052013 env[1217]: time="2025-07-15T11:26:29.051959696Z" level=info msg="CreateContainer within sandbox \"3c8995155688a7a273d8221de3b698e764ab769f4d1495070cff869a8cca8ffa\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"04b749fd814fd88d619e6a7511305dff6720d2876640b2d86361ade1adcabaea\"" Jul 15 11:26:29.053886 env[1217]: time="2025-07-15T11:26:29.053826857Z" level=info msg="StartContainer for \"04b749fd814fd88d619e6a7511305dff6720d2876640b2d86361ade1adcabaea\"" Jul 15 11:26:29.077919 systemd[1]: Started cri-containerd-04b749fd814fd88d619e6a7511305dff6720d2876640b2d86361ade1adcabaea.scope. Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.117000 audit: BPF prog-id=154 op=LOAD Jul 15 11:26:29.118000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.118000 audit[3648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3347 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623734396664383134666438386436313965366137353131333035 Jul 15 11:26:29.118000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.118000 audit[3648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3347 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623734396664383134666438386436313965366137353131333035 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.119000 audit: BPF prog-id=155 op=LOAD Jul 15 11:26:29.119000 audit[3648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3347 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623734396664383134666438386436313965366137353131333035 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit: BPF prog-id=156 op=LOAD Jul 15 11:26:29.120000 audit[3648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3347 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623734396664383134666438386436313965366137353131333035 Jul 15 11:26:29.120000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:26:29.120000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { perfmon } for pid=3648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit[3648]: AVC avc: denied { bpf } for pid=3648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:29.120000 audit: BPF prog-id=157 op=LOAD Jul 15 11:26:29.120000 audit[3648]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3347 pid=3648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.120000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034623734396664383134666438386436313965366137353131333035 Jul 15 11:26:29.147357 env[1217]: time="2025-07-15T11:26:29.147311733Z" level=info msg="StartContainer for \"04b749fd814fd88d619e6a7511305dff6720d2876640b2d86361ade1adcabaea\" returns successfully" Jul 15 11:26:29.692882 kubelet[1958]: I0715 11:26:29.692822 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-79d7bcccf-f8lkr" podStartSLOduration=1.1666229320000001 podStartE2EDuration="4.692804746s" podCreationTimestamp="2025-07-15 11:26:25 +0000 UTC" firstStartedPulling="2025-07-15 11:26:25.509007632 +0000 UTC m=+34.057371536" lastFinishedPulling="2025-07-15 11:26:29.035189446 +0000 UTC m=+37.583553350" observedRunningTime="2025-07-15 11:26:29.692472325 +0000 UTC m=+38.240836229" watchObservedRunningTime="2025-07-15 11:26:29.692804746 +0000 UTC m=+38.241168650" Jul 15 11:26:29.709000 audit[3689]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:29.711166 kernel: kauditd_printk_skb: 253 callbacks suppressed Jul 15 11:26:29.711212 kernel: audit: type=1325 audit(1752578789.709:1120): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:29.709000 audit[3689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe90199b0 a2=0 a3=1 items=0 ppid=2109 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.715128 kernel: audit: type=1300 audit(1752578789.709:1120): arch=c00000b7 syscall=211 success=yes exit=7480 a0=3 a1=ffffe90199b0 a2=0 a3=1 items=0 ppid=2109 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.715185 kernel: audit: type=1327 audit(1752578789.709:1120): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:29.709000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:29.721000 audit[3689]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:29.721000 audit[3689]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe90199b0 a2=0 a3=1 items=0 ppid=2109 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.726267 kernel: audit: type=1325 audit(1752578789.721:1121): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3689 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:29.726315 kernel: audit: type=1300 audit(1752578789.721:1121): arch=c00000b7 syscall=211 success=yes exit=6276 a0=3 a1=ffffe90199b0 a2=0 a3=1 items=0 ppid=2109 pid=3689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:29.726340 kernel: audit: type=1327 audit(1752578789.721:1121): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:29.721000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:30.551001 env[1217]: time="2025-07-15T11:26:30.550950861Z" level=info msg="StopPodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\"" Jul 15 11:26:30.551458 env[1217]: time="2025-07-15T11:26:30.551010304Z" level=info msg="StopPodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\"" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.599 [INFO][3739] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.599 [INFO][3739] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" iface="eth0" netns="/var/run/netns/cni-416fa6a5-4f96-b6a0-0c1f-851449a498cd" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.599 [INFO][3739] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" iface="eth0" netns="/var/run/netns/cni-416fa6a5-4f96-b6a0-0c1f-851449a498cd" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.599 [INFO][3739] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" iface="eth0" netns="/var/run/netns/cni-416fa6a5-4f96-b6a0-0c1f-851449a498cd" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.599 [INFO][3739] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.599 [INFO][3739] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.619 [INFO][3754] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.619 [INFO][3754] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.619 [INFO][3754] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.628 [WARNING][3754] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.628 [INFO][3754] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.630 [INFO][3754] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:30.639793 env[1217]: 2025-07-15 11:26:30.637 [INFO][3739] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:30.640271 env[1217]: time="2025-07-15T11:26:30.639928485Z" level=info msg="TearDown network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" successfully" Jul 15 11:26:30.640271 env[1217]: time="2025-07-15T11:26:30.639957566Z" level=info msg="StopPodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" returns successfully" Jul 15 11:26:30.640563 env[1217]: time="2025-07-15T11:26:30.640529883Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-744c4f5c87-8qkfz,Uid:ae2ac006-70eb-4fa6-88cc-c3fd68d2d670,Namespace:calico-system,Attempt:1,}" Jul 15 11:26:30.641958 systemd[1]: run-netns-cni\x2d416fa6a5\x2d4f96\x2db6a0\x2d0c1f\x2d851449a498cd.mount: Deactivated successfully. Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.600 [INFO][3738] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.601 [INFO][3738] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" iface="eth0" netns="/var/run/netns/cni-532092e5-911c-0390-c3cd-0ae2d1be42b9" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.601 [INFO][3738] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" iface="eth0" netns="/var/run/netns/cni-532092e5-911c-0390-c3cd-0ae2d1be42b9" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.601 [INFO][3738] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" iface="eth0" netns="/var/run/netns/cni-532092e5-911c-0390-c3cd-0ae2d1be42b9" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.601 [INFO][3738] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.601 [INFO][3738] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.619 [INFO][3756] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.619 [INFO][3756] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.630 [INFO][3756] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.638 [WARNING][3756] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.638 [INFO][3756] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.639 [INFO][3756] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:30.644633 env[1217]: 2025-07-15 11:26:30.642 [INFO][3738] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:30.644984 env[1217]: time="2025-07-15T11:26:30.644765190Z" level=info msg="TearDown network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" successfully" Jul 15 11:26:30.644984 env[1217]: time="2025-07-15T11:26:30.644791112Z" level=info msg="StopPodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" returns successfully" Jul 15 11:26:30.645077 kubelet[1958]: E0715 11:26:30.645030 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:30.646197 env[1217]: time="2025-07-15T11:26:30.646167799Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jwj5w,Uid:c919c5bb-fa83-4310-af91-85adfca12313,Namespace:kube-system,Attempt:1,}" Jul 15 11:26:30.647250 systemd[1]: run-netns-cni\x2d532092e5\x2d911c\x2d0390\x2dc3cd\x2d0ae2d1be42b9.mount: Deactivated successfully. Jul 15 11:26:30.792469 systemd-networkd[1043]: calife137dd056d: Link UP Jul 15 11:26:30.794009 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:26:30.794079 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calife137dd056d: link becomes ready Jul 15 11:26:30.794216 systemd-networkd[1043]: calife137dd056d: Gained carrier Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.707 [INFO][3771] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.720 [INFO][3771] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0 calico-kube-controllers-744c4f5c87- calico-system ae2ac006-70eb-4fa6-88cc-c3fd68d2d670 969 0 2025-07-15 11:26:10 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:744c4f5c87 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-744c4f5c87-8qkfz eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calife137dd056d [] [] }} ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.720 [INFO][3771] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.746 [INFO][3799] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" HandleID="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.747 [INFO][3799] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" HandleID="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40002c3780), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-744c4f5c87-8qkfz", "timestamp":"2025-07-15 11:26:30.746873284 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.747 [INFO][3799] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.747 [INFO][3799] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.747 [INFO][3799] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.758 [INFO][3799] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.764 [INFO][3799] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.768 [INFO][3799] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.769 [INFO][3799] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.771 [INFO][3799] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.771 [INFO][3799] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.774 [INFO][3799] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.777 [INFO][3799] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.783 [INFO][3799] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.783 [INFO][3799] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" host="localhost" Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.783 [INFO][3799] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:30.804986 env[1217]: 2025-07-15 11:26:30.783 [INFO][3799] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" HandleID="k8s-pod-network.c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.806628 env[1217]: 2025-07-15 11:26:30.785 [INFO][3771] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0", GenerateName:"calico-kube-controllers-744c4f5c87-", Namespace:"calico-system", SelfLink:"", UID:"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"744c4f5c87", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-744c4f5c87-8qkfz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calife137dd056d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:30.806628 env[1217]: 2025-07-15 11:26:30.785 [INFO][3771] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.806628 env[1217]: 2025-07-15 11:26:30.785 [INFO][3771] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calife137dd056d ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.806628 env[1217]: 2025-07-15 11:26:30.795 [INFO][3771] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.806628 env[1217]: 2025-07-15 11:26:30.795 [INFO][3771] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0", GenerateName:"calico-kube-controllers-744c4f5c87-", Namespace:"calico-system", SelfLink:"", UID:"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670", ResourceVersion:"969", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"744c4f5c87", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b", Pod:"calico-kube-controllers-744c4f5c87-8qkfz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calife137dd056d", MAC:"b6:59:9e:df:a8:0f", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:30.806628 env[1217]: 2025-07-15 11:26:30.803 [INFO][3771] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b" Namespace="calico-system" Pod="calico-kube-controllers-744c4f5c87-8qkfz" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:30.827498 env[1217]: time="2025-07-15T11:26:30.827425816Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:30.827498 env[1217]: time="2025-07-15T11:26:30.827465258Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:30.827669 env[1217]: time="2025-07-15T11:26:30.827475619Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:30.827669 env[1217]: time="2025-07-15T11:26:30.827630989Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b pid=3833 runtime=io.containerd.runc.v2 Jul 15 11:26:30.842096 systemd[1]: Started cri-containerd-c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b.scope. Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.882781 kernel: audit: type=1400 audit(1752578790.878:1122): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.882873 kernel: audit: type=1400 audit(1752578790.878:1123): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.882900 kernel: audit: type=1400 audit(1752578790.878:1124): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.886333 kernel: audit: type=1400 audit(1752578790.878:1125): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.878000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.880000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.880000 audit: BPF prog-id=158 op=LOAD Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334326362346334363730653530373138613737616135623633346564 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334326362346334363730653530373138613737616135623633346564 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit: BPF prog-id=159 op=LOAD Jul 15 11:26:30.887000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334326362346334363730653530373138613737616135623633346564 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit: BPF prog-id=160 op=LOAD Jul 15 11:26:30.887000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334326362346334363730653530373138613737616135623633346564 Jul 15 11:26:30.887000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:26:30.887000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { perfmon } for pid=3845 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit[3845]: AVC avc: denied { bpf } for pid=3845 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.887000 audit: BPF prog-id=161 op=LOAD Jul 15 11:26:30.887000 audit[3845]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3833 pid=3845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.887000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334326362346334363730653530373138613737616135623633346564 Jul 15 11:26:30.888640 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:30.894021 systemd-networkd[1043]: calida2b34d318e: Link UP Jul 15 11:26:30.895421 systemd-networkd[1043]: calida2b34d318e: Gained carrier Jul 15 11:26:30.895743 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calida2b34d318e: link becomes ready Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.709 [INFO][3772] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.728 [INFO][3772] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0 coredns-668d6bf9bc- kube-system c919c5bb-fa83-4310-af91-85adfca12313 970 0 2025-07-15 11:25:58 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-jwj5w eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calida2b34d318e [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.728 [INFO][3772] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.754 [INFO][3805] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" HandleID="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.755 [INFO][3805] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" HandleID="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d750), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-jwj5w", "timestamp":"2025-07-15 11:26:30.75487939 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.755 [INFO][3805] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.783 [INFO][3805] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.783 [INFO][3805] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.859 [INFO][3805] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.865 [INFO][3805] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.870 [INFO][3805] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.871 [INFO][3805] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.873 [INFO][3805] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.874 [INFO][3805] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.875 [INFO][3805] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6 Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.880 [INFO][3805] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.887 [INFO][3805] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.887 [INFO][3805] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" host="localhost" Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.887 [INFO][3805] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:30.907713 env[1217]: 2025-07-15 11:26:30.887 [INFO][3805] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" HandleID="k8s-pod-network.3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.908284 env[1217]: 2025-07-15 11:26:30.891 [INFO][3772] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c919c5bb-fa83-4310-af91-85adfca12313", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-jwj5w", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calida2b34d318e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:30.908284 env[1217]: 2025-07-15 11:26:30.891 [INFO][3772] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.908284 env[1217]: 2025-07-15 11:26:30.891 [INFO][3772] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calida2b34d318e ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.908284 env[1217]: 2025-07-15 11:26:30.895 [INFO][3772] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.908284 env[1217]: 2025-07-15 11:26:30.896 [INFO][3772] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c919c5bb-fa83-4310-af91-85adfca12313", ResourceVersion:"970", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6", Pod:"coredns-668d6bf9bc-jwj5w", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calida2b34d318e", MAC:"42:5c:9d:a5:17:fc", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:30.908284 env[1217]: 2025-07-15 11:26:30.905 [INFO][3772] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6" Namespace="kube-system" Pod="coredns-668d6bf9bc-jwj5w" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:30.914085 env[1217]: time="2025-07-15T11:26:30.914043411Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-744c4f5c87-8qkfz,Uid:ae2ac006-70eb-4fa6-88cc-c3fd68d2d670,Namespace:calico-system,Attempt:1,} returns sandbox id \"c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b\"" Jul 15 11:26:30.915620 env[1217]: time="2025-07-15T11:26:30.915589509Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:26:30.919311 env[1217]: time="2025-07-15T11:26:30.919250820Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:30.919311 env[1217]: time="2025-07-15T11:26:30.919288982Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:30.919311 env[1217]: time="2025-07-15T11:26:30.919299663Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:30.919584 env[1217]: time="2025-07-15T11:26:30.919544119Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6 pid=3882 runtime=io.containerd.runc.v2 Jul 15 11:26:30.930816 systemd[1]: Started cri-containerd-3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6.scope. Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.948000 audit: BPF prog-id=162 op=LOAD Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3882 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303138636335613037333633626261393666366235313161656138 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3882 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303138636335613037333633626261393666366235313161656138 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit: BPF prog-id=163 op=LOAD Jul 15 11:26:30.949000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3882 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303138636335613037333633626261393666366235313161656138 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit: BPF prog-id=164 op=LOAD Jul 15 11:26:30.949000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3882 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303138636335613037333633626261393666366235313161656138 Jul 15 11:26:30.949000 audit: BPF prog-id=164 op=UNLOAD Jul 15 11:26:30.949000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { perfmon } for pid=3893 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit[3893]: AVC avc: denied { bpf } for pid=3893 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:30.949000 audit: BPF prog-id=165 op=LOAD Jul 15 11:26:30.949000 audit[3893]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3882 pid=3893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:30.949000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3365303138636335613037333633626261393666366235313161656138 Jul 15 11:26:30.950636 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:30.966310 env[1217]: time="2025-07-15T11:26:30.966273552Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jwj5w,Uid:c919c5bb-fa83-4310-af91-85adfca12313,Namespace:kube-system,Attempt:1,} returns sandbox id \"3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6\"" Jul 15 11:26:30.967383 kubelet[1958]: E0715 11:26:30.967190 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:30.971082 env[1217]: time="2025-07-15T11:26:30.970900765Z" level=info msg="CreateContainer within sandbox \"3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:26:30.987052 env[1217]: time="2025-07-15T11:26:30.987009543Z" level=info msg="CreateContainer within sandbox \"3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"f8c04863d80cafa2df9ddd5b82d4da27fc541f10ecb3c3a13a84b60673034bb5\"" Jul 15 11:26:30.988917 env[1217]: time="2025-07-15T11:26:30.988889622Z" level=info msg="StartContainer for \"f8c04863d80cafa2df9ddd5b82d4da27fc541f10ecb3c3a13a84b60673034bb5\"" Jul 15 11:26:31.007553 systemd[1]: Started cri-containerd-f8c04863d80cafa2df9ddd5b82d4da27fc541f10ecb3c3a13a84b60673034bb5.scope. Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.023000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit: BPF prog-id=166 op=LOAD Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3882 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633034383633643830636166613264663964646435623832643464 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3882 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633034383633643830636166613264663964646435623832643464 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit: BPF prog-id=167 op=LOAD Jul 15 11:26:31.024000 audit[3923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3882 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633034383633643830636166613264663964646435623832643464 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit: BPF prog-id=168 op=LOAD Jul 15 11:26:31.024000 audit[3923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3882 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633034383633643830636166613264663964646435623832643464 Jul 15 11:26:31.024000 audit: BPF prog-id=168 op=UNLOAD Jul 15 11:26:31.024000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { perfmon } for pid=3923 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit[3923]: AVC avc: denied { bpf } for pid=3923 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.024000 audit: BPF prog-id=169 op=LOAD Jul 15 11:26:31.024000 audit[3923]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3882 pid=3923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.024000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638633034383633643830636166613264663964646435623832643464 Jul 15 11:26:31.038239 env[1217]: time="2025-07-15T11:26:31.038197476Z" level=info msg="StartContainer for \"f8c04863d80cafa2df9ddd5b82d4da27fc541f10ecb3c3a13a84b60673034bb5\" returns successfully" Jul 15 11:26:31.084000 audit[3934]: AVC avc: denied { getattr } for pid=3934 comm="coredns" path="cgroup:[4026532537]" dev="nsfs" ino=4026532537 scontext=system_u:system_r:svirt_lxc_net_t:s0:c85,c813 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:26:31.084000 audit[3934]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=4000154ac8 a2=4000156578 a3=0 items=0 ppid=3882 pid=3934 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c85,c813 key=(null) Jul 15 11:26:31.084000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:26:31.213701 kubelet[1958]: I0715 11:26:31.213660 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:26:31.214290 kubelet[1958]: E0715 11:26:31.213988 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:31.234000 audit[3969]: NETFILTER_CFG table=filter:101 family=2 entries=19 op=nft_register_rule pid=3969 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:31.234000 audit[3969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffc8c961e0 a2=0 a3=1 items=0 ppid=2109 pid=3969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.234000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:31.241000 audit[3969]: NETFILTER_CFG table=nat:102 family=2 entries=21 op=nft_register_chain pid=3969 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:31.241000 audit[3969]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7044 a0=3 a1=ffffc8c961e0 a2=0 a3=1 items=0 ppid=2109 pid=3969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.241000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:31.551758 env[1217]: time="2025-07-15T11:26:31.551682993Z" level=info msg="StopPodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\"" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.594 [INFO][4007] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.594 [INFO][4007] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" iface="eth0" netns="/var/run/netns/cni-66344f00-e0a9-9571-d389-401d51b0da7c" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.594 [INFO][4007] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" iface="eth0" netns="/var/run/netns/cni-66344f00-e0a9-9571-d389-401d51b0da7c" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.595 [INFO][4007] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" iface="eth0" netns="/var/run/netns/cni-66344f00-e0a9-9571-d389-401d51b0da7c" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.595 [INFO][4007] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.595 [INFO][4007] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.616 [INFO][4016] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.616 [INFO][4016] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.616 [INFO][4016] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.624 [WARNING][4016] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.624 [INFO][4016] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.625 [INFO][4016] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:31.631282 env[1217]: 2025-07-15 11:26:31.627 [INFO][4007] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:31.631809 env[1217]: time="2025-07-15T11:26:31.631372257Z" level=info msg="TearDown network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" successfully" Jul 15 11:26:31.631809 env[1217]: time="2025-07-15T11:26:31.631401939Z" level=info msg="StopPodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" returns successfully" Jul 15 11:26:31.632065 env[1217]: time="2025-07-15T11:26:31.632030417Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-pc29s,Uid:5276840e-1028-40c8-aa96-d1965cf900f0,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:26:31.643229 systemd[1]: run-netns-cni\x2d66344f00\x2de0a9\x2d9571\x2dd389\x2d401d51b0da7c.mount: Deactivated successfully. Jul 15 11:26:31.692327 kubelet[1958]: E0715 11:26:31.692278 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:31.692578 kubelet[1958]: E0715 11:26:31.692556 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:31.706181 kubelet[1958]: I0715 11:26:31.704529 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-jwj5w" podStartSLOduration=33.704516398 podStartE2EDuration="33.704516398s" podCreationTimestamp="2025-07-15 11:25:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:26:31.702988064 +0000 UTC m=+40.251351968" watchObservedRunningTime="2025-07-15 11:26:31.704516398 +0000 UTC m=+40.252880302" Jul 15 11:26:31.718000 audit[4048]: NETFILTER_CFG table=filter:103 family=2 entries=18 op=nft_register_rule pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:31.718000 audit[4048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6736 a0=3 a1=ffffe4011f30 a2=0 a3=1 items=0 ppid=2109 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.718000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:31.724000 audit[4048]: NETFILTER_CFG table=nat:104 family=2 entries=16 op=nft_register_rule pid=4048 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:31.724000 audit[4048]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4236 a0=3 a1=ffffe4011f30 a2=0 a3=1 items=0 ppid=2109 pid=4048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.724000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:31.757106 systemd-networkd[1043]: cali6cf8b9cb2dd: Link UP Jul 15 11:26:31.758403 systemd-networkd[1043]: cali6cf8b9cb2dd: Gained carrier Jul 15 11:26:31.758715 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali6cf8b9cb2dd: link becomes ready Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.668 [INFO][4024] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.680 [INFO][4024] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0 calico-apiserver-7c589bcf68- calico-apiserver 5276840e-1028-40c8-aa96-d1965cf900f0 993 0 2025-07-15 11:26:06 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7c589bcf68 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7c589bcf68-pc29s eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali6cf8b9cb2dd [] [] }} ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.680 [INFO][4024] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.721 [INFO][4040] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" HandleID="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.722 [INFO][4040] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" HandleID="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x400004d900), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7c589bcf68-pc29s", "timestamp":"2025-07-15 11:26:31.721933709 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.722 [INFO][4040] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.722 [INFO][4040] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.722 [INFO][4040] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.730 [INFO][4040] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.735 [INFO][4040] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.739 [INFO][4040] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.741 [INFO][4040] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.743 [INFO][4040] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.743 [INFO][4040] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.744 [INFO][4040] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.747 [INFO][4040] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.752 [INFO][4040] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.752 [INFO][4040] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" host="localhost" Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.752 [INFO][4040] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:31.772825 env[1217]: 2025-07-15 11:26:31.752 [INFO][4040] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" HandleID="k8s-pod-network.2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.773393 env[1217]: 2025-07-15 11:26:31.754 [INFO][4024] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"5276840e-1028-40c8-aa96-d1965cf900f0", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7c589bcf68-pc29s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6cf8b9cb2dd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:31.773393 env[1217]: 2025-07-15 11:26:31.754 [INFO][4024] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.773393 env[1217]: 2025-07-15 11:26:31.754 [INFO][4024] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali6cf8b9cb2dd ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.773393 env[1217]: 2025-07-15 11:26:31.759 [INFO][4024] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.773393 env[1217]: 2025-07-15 11:26:31.762 [INFO][4024] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"5276840e-1028-40c8-aa96-d1965cf900f0", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e", Pod:"calico-apiserver-7c589bcf68-pc29s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6cf8b9cb2dd", MAC:"3a:df:41:f3:55:82", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:31.773393 env[1217]: 2025-07-15 11:26:31.770 [INFO][4024] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-pc29s" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:31.783026 env[1217]: time="2025-07-15T11:26:31.782944624Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:31.783026 env[1217]: time="2025-07-15T11:26:31.782990547Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:31.783026 env[1217]: time="2025-07-15T11:26:31.783001547Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:31.783532 env[1217]: time="2025-07-15T11:26:31.783476617Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e pid=4066 runtime=io.containerd.runc.v2 Jul 15 11:26:31.798393 systemd[1]: Started cri-containerd-2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e.scope. Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.845000 audit: BPF prog-id=170 op=LOAD Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4066 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263653339616132613261626237386665623963306339666135303066 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4066 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263653339616132613261626237386665623963306339666135303066 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit: BPF prog-id=171 op=LOAD Jul 15 11:26:31.846000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4066 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263653339616132613261626237386665623963306339666135303066 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit: BPF prog-id=172 op=LOAD Jul 15 11:26:31.846000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4066 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263653339616132613261626237386665623963306339666135303066 Jul 15 11:26:31.846000 audit: BPF prog-id=172 op=UNLOAD Jul 15 11:26:31.846000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { perfmon } for pid=4076 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit[4076]: AVC avc: denied { bpf } for pid=4076 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:31.846000 audit: BPF prog-id=173 op=LOAD Jul 15 11:26:31.846000 audit[4076]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4066 pid=4076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:31.846000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263653339616132613261626237386665623963306339666135303066 Jul 15 11:26:31.848889 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:31.883525 env[1217]: time="2025-07-15T11:26:31.883485651Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-pc29s,Uid:5276840e-1028-40c8-aa96-d1965cf900f0,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e\"" Jul 15 11:26:31.905113 systemd-networkd[1043]: calife137dd056d: Gained IPv6LL Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit: BPF prog-id=174 op=LOAD Jul 15 11:26:32.143000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffe39a158 a2=98 a3=fffffe39a148 items=0 ppid=4098 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.143000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:26:32.143000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit: BPF prog-id=175 op=LOAD Jul 15 11:26:32.143000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffe39a008 a2=74 a3=95 items=0 ppid=4098 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.143000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:26:32.143000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { bpf } for pid=4116 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit: BPF prog-id=176 op=LOAD Jul 15 11:26:32.143000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=fffffe39a038 a2=40 a3=fffffe39a068 items=0 ppid=4098 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.143000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:26:32.143000 audit: BPF prog-id=176 op=UNLOAD Jul 15 11:26:32.143000 audit[4116]: AVC avc: denied { perfmon } for pid=4116 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.143000 audit[4116]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=0 a1=fffffe39a150 a2=50 a3=0 items=0 ppid=4098 pid=4116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.143000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit: BPF prog-id=177 op=LOAD Jul 15 11:26:32.147000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdbfc6748 a2=98 a3=ffffdbfc6738 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.147000 audit: BPF prog-id=177 op=UNLOAD Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit: BPF prog-id=178 op=LOAD Jul 15 11:26:32.147000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdbfc63d8 a2=74 a3=95 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.147000 audit: BPF prog-id=178 op=UNLOAD Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.147000 audit: BPF prog-id=179 op=LOAD Jul 15 11:26:32.147000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdbfc6438 a2=94 a3=2 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.147000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.147000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit: BPF prog-id=180 op=LOAD Jul 15 11:26:32.238000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffdbfc63f8 a2=40 a3=ffffdbfc6428 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.238000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.238000 audit: BPF prog-id=180 op=UNLOAD Jul 15 11:26:32.238000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.238000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffdbfc6510 a2=50 a3=0 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.238000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbfc6468 a2=28 a3=ffffdbfc6598 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbfc6498 a2=28 a3=ffffdbfc65c8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbfc6348 a2=28 a3=ffffdbfc6478 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbfc64b8 a2=28 a3=ffffdbfc65e8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbfc6498 a2=28 a3=ffffdbfc65c8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbfc6488 a2=28 a3=ffffdbfc65b8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbfc64b8 a2=28 a3=ffffdbfc65e8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbfc6498 a2=28 a3=ffffdbfc65c8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbfc64b8 a2=28 a3=ffffdbfc65e8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.246000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.246000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdbfc6488 a2=28 a3=ffffdbfc65b8 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.246000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffdbfc6508 a2=28 a3=ffffdbfc6648 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdbfc6240 a2=50 a3=0 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit: BPF prog-id=181 op=LOAD Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdbfc6248 a2=94 a3=5 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit: BPF prog-id=181 op=UNLOAD Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffdbfc6350 a2=50 a3=0 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffdbfc6498 a2=4 a3=3 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { confidentiality } for pid=4117 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdbfc6478 a2=94 a3=6 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { confidentiality } for pid=4117 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdbfc5c48 a2=94 a3=83 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { perfmon } for pid=4117 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { bpf } for pid=4117 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.247000 audit[4117]: AVC avc: denied { confidentiality } for pid=4117 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:26:32.247000 audit[4117]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffdbfc5c48 a2=94 a3=83 items=0 ppid=4098 pid=4117 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.247000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.268000 audit: BPF prog-id=182 op=LOAD Jul 15 11:26:32.268000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0676da8 a2=98 a3=ffffe0676d98 items=0 ppid=4098 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.268000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:26:32.269000 audit: BPF prog-id=182 op=UNLOAD Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit: BPF prog-id=183 op=LOAD Jul 15 11:26:32.269000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0676c58 a2=74 a3=95 items=0 ppid=4098 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.269000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:26:32.269000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { perfmon } for pid=4127 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit[4127]: AVC avc: denied { bpf } for pid=4127 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.269000 audit: BPF prog-id=184 op=LOAD Jul 15 11:26:32.269000 audit[4127]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffe0676c88 a2=40 a3=ffffe0676cb8 items=0 ppid=4098 pid=4127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.269000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:26:32.269000 audit: BPF prog-id=184 op=UNLOAD Jul 15 11:26:32.375158 systemd-networkd[1043]: vxlan.calico: Link UP Jul 15 11:26:32.375171 systemd-networkd[1043]: vxlan.calico: Gained carrier Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit: BPF prog-id=185 op=LOAD Jul 15 11:26:32.394000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec40368 a2=98 a3=ffffdec40358 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.394000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.394000 audit: BPF prog-id=185 op=UNLOAD Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.394000 audit: BPF prog-id=186 op=LOAD Jul 15 11:26:32.394000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec40048 a2=74 a3=95 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.394000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit: BPF prog-id=186 op=UNLOAD Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit: BPF prog-id=187 op=LOAD Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffdec400a8 a2=94 a3=2 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdec400d8 a2=28 a3=ffffdec40208 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec40108 a2=28 a3=ffffdec40238 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec3ffb8 a2=28 a3=ffffdec400e8 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdec40128 a2=28 a3=ffffdec40258 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdec40108 a2=28 a3=ffffdec40238 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdec400f8 a2=28 a3=ffffdec40228 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdec40128 a2=28 a3=ffffdec40258 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec40108 a2=28 a3=ffffdec40238 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec40128 a2=28 a3=ffffdec40258 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.395000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.395000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffdec400f8 a2=28 a3=ffffdec40228 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.395000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=12 a1=ffffdec40178 a2=28 a3=ffffdec402b8 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.399000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.399000 audit: BPF prog-id=188 op=LOAD Jul 15 11:26:32.399000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdec3ff98 a2=40 a3=ffffdec3ffc8 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.399000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.399000 audit: BPF prog-id=188 op=UNLOAD Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=0 a1=ffffdec3ffc0 a2=50 a3=0 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=0 a1=ffffdec3ffc0 a2=50 a3=0 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit: BPF prog-id=189 op=LOAD Jul 15 11:26:32.400000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdec3f728 a2=94 a3=2 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.400000 audit: BPF prog-id=189 op=UNLOAD Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { perfmon } for pid=4154 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit[4154]: AVC avc: denied { bpf } for pid=4154 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.400000 audit: BPF prog-id=190 op=LOAD Jul 15 11:26:32.400000 audit[4154]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffdec3f8b8 a2=94 a3=30 items=0 ppid=4098 pid=4154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.400000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit: BPF prog-id=191 op=LOAD Jul 15 11:26:32.407000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=3 a0=5 a1=ffffc5de0138 a2=98 a3=ffffc5de0128 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.407000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.407000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit: BPF prog-id=192 op=LOAD Jul 15 11:26:32.407000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc5ddfdc8 a2=74 a3=95 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.407000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.407000 audit: BPF prog-id=192 op=UNLOAD Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.407000 audit: BPF prog-id=193 op=LOAD Jul 15 11:26:32.407000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc5ddfe28 a2=94 a3=2 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.407000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.407000 audit: BPF prog-id=193 op=UNLOAD Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit: BPF prog-id=194 op=LOAD Jul 15 11:26:32.491000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=5 a1=ffffc5ddfde8 a2=40 a3=ffffc5ddfe18 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.491000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.491000 audit: BPF prog-id=194 op=UNLOAD Jul 15 11:26:32.491000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.491000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=0 a1=ffffc5ddff00 a2=50 a3=0 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.491000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc5ddfe58 a2=28 a3=ffffc5ddff88 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc5ddfe88 a2=28 a3=ffffc5ddffb8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc5ddfd38 a2=28 a3=ffffc5ddfe68 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc5ddfea8 a2=28 a3=ffffc5ddffd8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc5ddfe88 a2=28 a3=ffffc5ddffb8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc5ddfe78 a2=28 a3=ffffc5ddffa8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc5ddfea8 a2=28 a3=ffffc5ddffd8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc5ddfe88 a2=28 a3=ffffc5ddffb8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc5ddfea8 a2=28 a3=ffffc5ddffd8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=12 a1=ffffc5ddfe78 a2=28 a3=ffffc5ddffa8 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=4 a0=12 a1=ffffc5ddfef8 a2=28 a3=ffffc5de0038 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc5ddfc30 a2=50 a3=0 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit: BPF prog-id=195 op=LOAD Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=6 a0=5 a1=ffffc5ddfc38 a2=94 a3=5 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=5 a0=0 a1=ffffc5ddfd40 a2=50 a3=0 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=16 a1=ffffc5ddfe88 a2=4 a3=3 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { confidentiality } for pid=4162 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc5ddfe68 a2=94 a3=6 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.500000 audit[4162]: AVC avc: denied { confidentiality } for pid=4162 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:26:32.500000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc5ddf638 a2=94 a3=83 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.500000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { perfmon } for pid=4162 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { confidentiality } for pid=4162 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:26:32.501000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=no exit=-22 a0=5 a1=ffffc5ddf638 a2=94 a3=83 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc5de1078 a2=10 a3=ffffc5de1168 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc5de0f38 a2=10 a3=ffffc5de1028 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc5de0ea8 a2=10 a3=ffffc5de1028 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.501000 audit[4162]: AVC avc: denied { bpf } for pid=4162 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.501000 audit[4162]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=ffffc5de0ea8 a2=10 a3=ffffc5de1028 items=0 ppid=4098 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.501000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:26:32.509000 audit: BPF prog-id=190 op=UNLOAD Jul 15 11:26:32.551894 env[1217]: time="2025-07-15T11:26:32.551857354Z" level=info msg="StopPodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\"" Jul 15 11:26:32.574000 audit[4203]: NETFILTER_CFG table=mangle:105 family=2 entries=16 op=nft_register_chain pid=4203 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:32.574000 audit[4203]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6868 a0=3 a1=ffffff9ee0c0 a2=0 a3=ffff86941fa8 items=0 ppid=4098 pid=4203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.574000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:32.585000 audit[4205]: NETFILTER_CFG table=raw:106 family=2 entries=21 op=nft_register_chain pid=4205 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:32.585000 audit[4205]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=8452 a0=3 a1=ffffe5084310 a2=0 a3=ffffb41b8fa8 items=0 ppid=4098 pid=4205 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.585000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:32.586000 audit[4208]: NETFILTER_CFG table=nat:107 family=2 entries=15 op=nft_register_chain pid=4208 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:32.586000 audit[4208]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=5084 a0=3 a1=ffffec448390 a2=0 a3=ffff94416fa8 items=0 ppid=4098 pid=4208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.586000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:32.593000 audit[4204]: NETFILTER_CFG table=filter:108 family=2 entries=198 op=nft_register_chain pid=4204 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:32.593000 audit[4204]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=114752 a0=3 a1=ffffc6825f30 a2=0 a3=ffffbba0bfa8 items=0 ppid=4098 pid=4204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.593000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.609 [INFO][4193] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.609 [INFO][4193] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" iface="eth0" netns="/var/run/netns/cni-d6f67d8c-422f-493c-aed4-d19705398b37" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.609 [INFO][4193] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" iface="eth0" netns="/var/run/netns/cni-d6f67d8c-422f-493c-aed4-d19705398b37" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.609 [INFO][4193] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" iface="eth0" netns="/var/run/netns/cni-d6f67d8c-422f-493c-aed4-d19705398b37" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.609 [INFO][4193] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.609 [INFO][4193] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.638 [INFO][4219] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.639 [INFO][4219] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.639 [INFO][4219] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.648 [WARNING][4219] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.648 [INFO][4219] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.649 [INFO][4219] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:32.653169 env[1217]: 2025-07-15 11:26:32.651 [INFO][4193] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:32.656828 systemd[1]: run-netns-cni\x2dd6f67d8c\x2d422f\x2d493c\x2daed4\x2dd19705398b37.mount: Deactivated successfully. Jul 15 11:26:32.660083 env[1217]: time="2025-07-15T11:26:32.660038522Z" level=info msg="TearDown network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" successfully" Jul 15 11:26:32.660171 env[1217]: time="2025-07-15T11:26:32.660154249Z" level=info msg="StopPodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" returns successfully" Jul 15 11:26:32.660602 kubelet[1958]: E0715 11:26:32.660550 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:32.662271 env[1217]: time="2025-07-15T11:26:32.662216932Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jt247,Uid:4a9557ee-7213-48c8-9ffc-d913ee220542,Namespace:kube-system,Attempt:1,}" Jul 15 11:26:32.703722 kubelet[1958]: E0715 11:26:32.703678 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:32.717385 systemd[1]: Started sshd@8-10.0.0.138:22-10.0.0.1:49688.service. Jul 15 11:26:32.716000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.138:22-10.0.0.1:49688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:32.748000 audit[4255]: NETFILTER_CFG table=filter:109 family=2 entries=15 op=nft_register_rule pid=4255 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:32.748000 audit[4255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffffd6146f0 a2=0 a3=1 items=0 ppid=2109 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.748000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:32.755000 audit[4255]: NETFILTER_CFG table=nat:110 family=2 entries=37 op=nft_register_chain pid=4255 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:32.755000 audit[4255]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=fffffd6146f0 a2=0 a3=1 items=0 ppid=2109 pid=4255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.755000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:32.780000 audit[4245]: USER_ACCT pid=4245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:32.781238 sshd[4245]: Accepted publickey for core from 10.0.0.1 port 49688 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:32.781000 audit[4245]: CRED_ACQ pid=4245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:32.781000 audit[4245]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe59791e0 a2=3 a3=1 items=0 ppid=1 pid=4245 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.781000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:32.783102 sshd[4245]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:32.787658 systemd[1]: Started session-9.scope. Jul 15 11:26:32.788010 systemd-logind[1204]: New session 9 of user core. Jul 15 11:26:32.793000 audit[4245]: USER_START pid=4245 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:32.794000 audit[4259]: CRED_ACQ pid=4259 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:32.820632 systemd-networkd[1043]: caliac468ed7432: Link UP Jul 15 11:26:32.822320 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliac468ed7432: link becomes ready Jul 15 11:26:32.821312 systemd-networkd[1043]: caliac468ed7432: Gained carrier Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.719 [INFO][4229] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--jt247-eth0 coredns-668d6bf9bc- kube-system 4a9557ee-7213-48c8-9ffc-d913ee220542 1023 0 2025-07-15 11:25:58 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-jt247 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] caliac468ed7432 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.719 [INFO][4229] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.756 [INFO][4247] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" HandleID="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.757 [INFO][4247] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" HandleID="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001b14f0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-jt247", "timestamp":"2025-07-15 11:26:32.756660276 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.757 [INFO][4247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.757 [INFO][4247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.757 [INFO][4247] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.770 [INFO][4247] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.778 [INFO][4247] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.784 [INFO][4247] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.787 [INFO][4247] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.790 [INFO][4247] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.790 [INFO][4247] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.792 [INFO][4247] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21 Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.803 [INFO][4247] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.816 [INFO][4247] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.816 [INFO][4247] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" host="localhost" Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.817 [INFO][4247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:32.847035 env[1217]: 2025-07-15 11:26:32.817 [INFO][4247] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" HandleID="k8s-pod-network.2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.847600 env[1217]: 2025-07-15 11:26:32.819 [INFO][4229] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jt247-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4a9557ee-7213-48c8-9ffc-d913ee220542", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-jt247", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac468ed7432", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:32.847600 env[1217]: 2025-07-15 11:26:32.819 [INFO][4229] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.847600 env[1217]: 2025-07-15 11:26:32.819 [INFO][4229] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliac468ed7432 ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.847600 env[1217]: 2025-07-15 11:26:32.821 [INFO][4229] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.847600 env[1217]: 2025-07-15 11:26:32.821 [INFO][4229] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jt247-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4a9557ee-7213-48c8-9ffc-d913ee220542", ResourceVersion:"1023", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21", Pod:"coredns-668d6bf9bc-jt247", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac468ed7432", MAC:"d6:53:52:15:5a:bf", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:32.847600 env[1217]: 2025-07-15 11:26:32.843 [INFO][4229] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21" Namespace="kube-system" Pod="coredns-668d6bf9bc-jt247" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:32.868000 audit[4273]: NETFILTER_CFG table=filter:111 family=2 entries=44 op=nft_register_chain pid=4273 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:32.868000 audit[4273]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=21532 a0=3 a1=ffffd9ebdd80 a2=0 a3=ffffa3c71fa8 items=0 ppid=4098 pid=4273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.868000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:32.876479 env[1217]: time="2025-07-15T11:26:32.876419537Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:32.876617 env[1217]: time="2025-07-15T11:26:32.876469540Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:32.876617 env[1217]: time="2025-07-15T11:26:32.876482101Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:32.877588 env[1217]: time="2025-07-15T11:26:32.877555086Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21 pid=4284 runtime=io.containerd.runc.v2 Jul 15 11:26:32.903194 systemd[1]: Started cri-containerd-2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21.scope. Jul 15 11:26:32.929961 systemd-networkd[1043]: calida2b34d318e: Gained IPv6LL Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.932000 audit: BPF prog-id=196 op=LOAD Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000115b38 a2=10 a3=0 items=0 ppid=4284 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373561666133396661626231303861626539386464306266313332 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001155a0 a2=3c a3=0 items=0 ppid=4284 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373561666133396661626231303861626539386464306266313332 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit: BPF prog-id=197 op=LOAD Jul 15 11:26:32.933000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001158e0 a2=78 a3=0 items=0 ppid=4284 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373561666133396661626231303861626539386464306266313332 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit: BPF prog-id=198 op=LOAD Jul 15 11:26:32.933000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000115670 a2=78 a3=0 items=0 ppid=4284 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373561666133396661626231303861626539386464306266313332 Jul 15 11:26:32.933000 audit: BPF prog-id=198 op=UNLOAD Jul 15 11:26:32.933000 audit: BPF prog-id=197 op=UNLOAD Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { perfmon } for pid=4294 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit[4294]: AVC avc: denied { bpf } for pid=4294 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:32.933000 audit: BPF prog-id=199 op=LOAD Jul 15 11:26:32.933000 audit[4294]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000115b40 a2=78 a3=0 items=0 ppid=4284 pid=4294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:32.933000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3239373561666133396661626231303861626539386464306266313332 Jul 15 11:26:32.934500 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:32.959869 env[1217]: time="2025-07-15T11:26:32.959831139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-jt247,Uid:4a9557ee-7213-48c8-9ffc-d913ee220542,Namespace:kube-system,Attempt:1,} returns sandbox id \"2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21\"" Jul 15 11:26:32.960815 kubelet[1958]: E0715 11:26:32.960779 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:32.963648 env[1217]: time="2025-07-15T11:26:32.963598965Z" level=info msg="CreateContainer within sandbox \"2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:26:32.988542 env[1217]: time="2025-07-15T11:26:32.988492138Z" level=info msg="CreateContainer within sandbox \"2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"249c5b76d04bf61f6c8979f938c46726a1894bc1090ce1411dd2060950afcc4d\"" Jul 15 11:26:32.989260 env[1217]: time="2025-07-15T11:26:32.989209501Z" level=info msg="StartContainer for \"249c5b76d04bf61f6c8979f938c46726a1894bc1090ce1411dd2060950afcc4d\"" Jul 15 11:26:32.993917 systemd-networkd[1043]: cali6cf8b9cb2dd: Gained IPv6LL Jul 15 11:26:33.022717 systemd[1]: Started cri-containerd-249c5b76d04bf61f6c8979f938c46726a1894bc1090ce1411dd2060950afcc4d.scope. Jul 15 11:26:33.036194 sshd[4245]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:33.039000 audit[4245]: USER_END pid=4245 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:33.039000 audit[4245]: CRED_DISP pid=4245 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:33.041414 systemd[1]: sshd@8-10.0.0.138:22-10.0.0.1:49688.service: Deactivated successfully. Jul 15 11:26:33.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.138:22-10.0.0.1:49688 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:33.042148 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:26:33.045318 systemd-logind[1204]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:26:33.046076 systemd-logind[1204]: Removed session 9. Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.062000 audit: BPF prog-id=200 op=LOAD Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4284 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234396335623736643034626636316636633839373966393338633436 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4284 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234396335623736643034626636316636633839373966393338633436 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit: BPF prog-id=201 op=LOAD Jul 15 11:26:33.063000 audit[4327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4284 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234396335623736643034626636316636633839373966393338633436 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit: BPF prog-id=202 op=LOAD Jul 15 11:26:33.063000 audit[4327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4284 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234396335623736643034626636316636633839373966393338633436 Jul 15 11:26:33.063000 audit: BPF prog-id=202 op=UNLOAD Jul 15 11:26:33.063000 audit: BPF prog-id=201 op=UNLOAD Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { perfmon } for pid=4327 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit[4327]: AVC avc: denied { bpf } for pid=4327 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.063000 audit: BPF prog-id=203 op=LOAD Jul 15 11:26:33.063000 audit[4327]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4284 pid=4327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.063000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3234396335623736643034626636316636633839373966393338633436 Jul 15 11:26:33.076029 env[1217]: time="2025-07-15T11:26:33.075988794Z" level=info msg="StartContainer for \"249c5b76d04bf61f6c8979f938c46726a1894bc1090ce1411dd2060950afcc4d\" returns successfully" Jul 15 11:26:33.089000 audit[4337]: AVC avc: denied { getattr } for pid=4337 comm="coredns" path="cgroup:[4026532207]" dev="nsfs" ino=4026532207 scontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c1021 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:26:33.089000 audit[4337]: SYSCALL arch=c00000b7 syscall=79 success=no exit=-13 a0=ffffffffffffff9c a1=40001ccba0 a2=40001ce578 a3=0 items=0 ppid=4284 pid=4337 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c223,c1021 key=(null) Jul 15 11:26:33.089000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:26:33.291885 env[1217]: time="2025-07-15T11:26:33.291835621Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.293953 env[1217]: time="2025-07-15T11:26:33.293918102Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.295610 env[1217]: time="2025-07-15T11:26:33.295581800Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.297098 env[1217]: time="2025-07-15T11:26:33.297060246Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:33.297495 env[1217]: time="2025-07-15T11:26:33.297469630Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:ba9e7793995ca67a9b78aa06adda4e89cbd435b1e88ab1032ca665140517fa7a\"" Jul 15 11:26:33.299394 env[1217]: time="2025-07-15T11:26:33.299306538Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:26:33.304960 env[1217]: time="2025-07-15T11:26:33.304918666Z" level=info msg="CreateContainer within sandbox \"c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:26:33.314473 env[1217]: time="2025-07-15T11:26:33.314434502Z" level=info msg="CreateContainer within sandbox \"c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"63eac1796d02f893454404065dc292be0768bf99147019b6ad01d04e437d2bd8\"" Jul 15 11:26:33.314838 env[1217]: time="2025-07-15T11:26:33.314807644Z" level=info msg="StartContainer for \"63eac1796d02f893454404065dc292be0768bf99147019b6ad01d04e437d2bd8\"" Jul 15 11:26:33.329356 systemd[1]: Started cri-containerd-63eac1796d02f893454404065dc292be0768bf99147019b6ad01d04e437d2bd8.scope. Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.357000 audit: BPF prog-id=204 op=LOAD Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=3833 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633656163313739366430326638393334353434303430363564633239 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=3833 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633656163313739366430326638393334353434303430363564633239 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit: BPF prog-id=205 op=LOAD Jul 15 11:26:33.358000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=3833 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633656163313739366430326638393334353434303430363564633239 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit: BPF prog-id=206 op=LOAD Jul 15 11:26:33.358000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=3833 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633656163313739366430326638393334353434303430363564633239 Jul 15 11:26:33.358000 audit: BPF prog-id=206 op=UNLOAD Jul 15 11:26:33.358000 audit: BPF prog-id=205 op=UNLOAD Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { perfmon } for pid=4371 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit[4371]: AVC avc: denied { bpf } for pid=4371 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.358000 audit: BPF prog-id=207 op=LOAD Jul 15 11:26:33.358000 audit[4371]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=3833 pid=4371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3633656163313739366430326638393334353434303430363564633239 Jul 15 11:26:33.383536 env[1217]: time="2025-07-15T11:26:33.383469501Z" level=info msg="StartContainer for \"63eac1796d02f893454404065dc292be0768bf99147019b6ad01d04e437d2bd8\" returns successfully" Jul 15 11:26:33.551623 env[1217]: time="2025-07-15T11:26:33.551514251Z" level=info msg="StopPodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\"" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.597 [INFO][4421] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.598 [INFO][4421] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" iface="eth0" netns="/var/run/netns/cni-6dc6f5b6-4745-9309-455c-979cce3fa40f" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.598 [INFO][4421] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" iface="eth0" netns="/var/run/netns/cni-6dc6f5b6-4745-9309-455c-979cce3fa40f" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.598 [INFO][4421] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" iface="eth0" netns="/var/run/netns/cni-6dc6f5b6-4745-9309-455c-979cce3fa40f" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.598 [INFO][4421] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.598 [INFO][4421] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.617 [INFO][4430] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.618 [INFO][4430] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.618 [INFO][4430] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.626 [WARNING][4430] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.627 [INFO][4430] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.628 [INFO][4430] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:33.631753 env[1217]: 2025-07-15 11:26:33.630 [INFO][4421] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:33.632350 env[1217]: time="2025-07-15T11:26:33.631866591Z" level=info msg="TearDown network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" successfully" Jul 15 11:26:33.632350 env[1217]: time="2025-07-15T11:26:33.631896953Z" level=info msg="StopPodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" returns successfully" Jul 15 11:26:33.632647 env[1217]: time="2025-07-15T11:26:33.632601394Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7vgn6,Uid:f950f0d3-7bd4-45b0-9b8d-5674d38b8105,Namespace:calico-system,Attempt:1,}" Jul 15 11:26:33.660091 systemd[1]: run-containerd-runc-k8s.io-2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21-runc.myfMdE.mount: Deactivated successfully. Jul 15 11:26:33.660371 systemd[1]: run-netns-cni\x2d6dc6f5b6\x2d4745\x2d9309\x2d455c\x2d979cce3fa40f.mount: Deactivated successfully. Jul 15 11:26:33.718738 kubelet[1958]: E0715 11:26:33.718687 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:33.722300 kubelet[1958]: E0715 11:26:33.722270 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:33.741510 kubelet[1958]: I0715 11:26:33.741037 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-jt247" podStartSLOduration=35.741022016 podStartE2EDuration="35.741022016s" podCreationTimestamp="2025-07-15 11:25:58 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:26:33.73852727 +0000 UTC m=+42.286891174" watchObservedRunningTime="2025-07-15 11:26:33.741022016 +0000 UTC m=+42.289385880" Jul 15 11:26:33.741510 kubelet[1958]: I0715 11:26:33.741174 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-744c4f5c87-8qkfz" podStartSLOduration=21.357929463 podStartE2EDuration="23.741169385s" podCreationTimestamp="2025-07-15 11:26:10 +0000 UTC" firstStartedPulling="2025-07-15 11:26:30.915346493 +0000 UTC m=+39.463710397" lastFinishedPulling="2025-07-15 11:26:33.298586415 +0000 UTC m=+41.846950319" observedRunningTime="2025-07-15 11:26:33.724637858 +0000 UTC m=+42.273001722" watchObservedRunningTime="2025-07-15 11:26:33.741169385 +0000 UTC m=+42.289533289" Jul 15 11:26:33.749387 systemd-networkd[1043]: calif5ca17d3cf9: Link UP Jul 15 11:26:33.753236 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:26:33.753316 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif5ca17d3cf9: link becomes ready Jul 15 11:26:33.753432 systemd-networkd[1043]: calif5ca17d3cf9: Gained carrier Jul 15 11:26:33.752000 audit[4461]: NETFILTER_CFG table=filter:112 family=2 entries=12 op=nft_register_rule pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:33.752000 audit[4461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=fffff4c1bce0 a2=0 a3=1 items=0 ppid=2109 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.752000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:33.761000 audit[4461]: NETFILTER_CFG table=nat:113 family=2 entries=46 op=nft_register_rule pid=4461 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:33.761000 audit[4461]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=14964 a0=3 a1=fffff4c1bce0 a2=0 a3=1 items=0 ppid=2109 pid=4461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.761000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.670 [INFO][4438] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--7vgn6-eth0 csi-node-driver- calico-system f950f0d3-7bd4-45b0-9b8d-5674d38b8105 1045 0 2025-07-15 11:26:10 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-7vgn6 eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] calif5ca17d3cf9 [] [] }} ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.670 [INFO][4438] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.693 [INFO][4452] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" HandleID="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.693 [INFO][4452] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" HandleID="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40005973a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-7vgn6", "timestamp":"2025-07-15 11:26:33.693520118 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.693 [INFO][4452] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.693 [INFO][4452] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.693 [INFO][4452] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.702 [INFO][4452] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.707 [INFO][4452] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.719 [INFO][4452] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.722 [INFO][4452] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.724 [INFO][4452] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.724 [INFO][4452] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.726 [INFO][4452] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4 Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.730 [INFO][4452] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.741 [INFO][4452] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.741 [INFO][4452] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" host="localhost" Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.741 [INFO][4452] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:33.773122 env[1217]: 2025-07-15 11:26:33.741 [INFO][4452] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" HandleID="k8s-pod-network.8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.773769 env[1217]: 2025-07-15 11:26:33.748 [INFO][4438] cni-plugin/k8s.go 418: Populated endpoint ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7vgn6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f950f0d3-7bd4-45b0-9b8d-5674d38b8105", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-7vgn6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5ca17d3cf9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:33.773769 env[1217]: 2025-07-15 11:26:33.748 [INFO][4438] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.773769 env[1217]: 2025-07-15 11:26:33.748 [INFO][4438] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif5ca17d3cf9 ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.773769 env[1217]: 2025-07-15 11:26:33.754 [INFO][4438] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.773769 env[1217]: 2025-07-15 11:26:33.758 [INFO][4438] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7vgn6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f950f0d3-7bd4-45b0-9b8d-5674d38b8105", ResourceVersion:"1045", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4", Pod:"csi-node-driver-7vgn6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5ca17d3cf9", MAC:"46:bf:c4:12:37:c0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:33.773769 env[1217]: 2025-07-15 11:26:33.770 [INFO][4438] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4" Namespace="calico-system" Pod="csi-node-driver-7vgn6" WorkloadEndpoint="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:33.785576 env[1217]: time="2025-07-15T11:26:33.785502138Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:33.785959 env[1217]: time="2025-07-15T11:26:33.785543301Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:33.785959 env[1217]: time="2025-07-15T11:26:33.785553661Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:33.785000 audit[4478]: NETFILTER_CFG table=filter:114 family=2 entries=58 op=nft_register_chain pid=4478 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:33.785000 audit[4478]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=27180 a0=3 a1=ffffc2bb3f20 a2=0 a3=ffffbad33fa8 items=0 ppid=4098 pid=4478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.785000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:33.786894 env[1217]: time="2025-07-15T11:26:33.786815415Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4 pid=4479 runtime=io.containerd.runc.v2 Jul 15 11:26:33.798030 systemd[1]: Started cri-containerd-8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4.scope. Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.830000 audit: BPF prog-id=208 op=LOAD Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4479 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653935616537656134313736643336383465396139653036366538 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4479 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653935616537656134313736643336383465396139653036366538 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit: BPF prog-id=209 op=LOAD Jul 15 11:26:33.831000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4479 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653935616537656134313736643336383465396139653036366538 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit: BPF prog-id=210 op=LOAD Jul 15 11:26:33.831000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4479 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653935616537656134313736643336383465396139653036366538 Jul 15 11:26:33.831000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:26:33.831000 audit: BPF prog-id=209 op=UNLOAD Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { perfmon } for pid=4489 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit[4489]: AVC avc: denied { bpf } for pid=4489 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:33.831000 audit: BPF prog-id=211 op=LOAD Jul 15 11:26:33.831000 audit[4489]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4479 pid=4489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:33.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864653935616537656134313736643336383465396139653036366538 Jul 15 11:26:33.833767 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:33.843405 env[1217]: time="2025-07-15T11:26:33.843357323Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-7vgn6,Uid:f950f0d3-7bd4-45b0-9b8d-5674d38b8105,Namespace:calico-system,Attempt:1,} returns sandbox id \"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4\"" Jul 15 11:26:34.080925 systemd-networkd[1043]: caliac468ed7432: Gained IPv6LL Jul 15 11:26:34.081197 systemd-networkd[1043]: vxlan.calico: Gained IPv6LL Jul 15 11:26:34.551544 env[1217]: time="2025-07-15T11:26:34.551438105Z" level=info msg="StopPodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\"" Jul 15 11:26:34.551822 env[1217]: time="2025-07-15T11:26:34.551596994Z" level=info msg="StopPodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\"" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.598 [INFO][4530] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.598 [INFO][4530] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" iface="eth0" netns="/var/run/netns/cni-3e9c4a2a-999d-6d35-0e46-b25f58a5cd13" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.598 [INFO][4530] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" iface="eth0" netns="/var/run/netns/cni-3e9c4a2a-999d-6d35-0e46-b25f58a5cd13" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.599 [INFO][4530] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" iface="eth0" netns="/var/run/netns/cni-3e9c4a2a-999d-6d35-0e46-b25f58a5cd13" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.599 [INFO][4530] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.599 [INFO][4530] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.618 [INFO][4551] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.618 [INFO][4551] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.618 [INFO][4551] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.630 [WARNING][4551] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.630 [INFO][4551] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.634 [INFO][4551] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:34.638028 env[1217]: 2025-07-15 11:26:34.636 [INFO][4530] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:34.638880 env[1217]: time="2025-07-15T11:26:34.638169899Z" level=info msg="TearDown network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" successfully" Jul 15 11:26:34.638880 env[1217]: time="2025-07-15T11:26:34.638202221Z" level=info msg="StopPodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" returns successfully" Jul 15 11:26:34.641071 env[1217]: time="2025-07-15T11:26:34.641027422Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-hrn2z,Uid:e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:26:34.642648 systemd[1]: run-netns-cni\x2d3e9c4a2a\x2d999d\x2d6d35\x2d0e46\x2db25f58a5cd13.mount: Deactivated successfully. Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.602 [INFO][4535] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.603 [INFO][4535] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" iface="eth0" netns="/var/run/netns/cni-3991ae4d-8e21-3b1f-539f-fdc0b604f253" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.603 [INFO][4535] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" iface="eth0" netns="/var/run/netns/cni-3991ae4d-8e21-3b1f-539f-fdc0b604f253" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.606 [INFO][4535] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" iface="eth0" netns="/var/run/netns/cni-3991ae4d-8e21-3b1f-539f-fdc0b604f253" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.606 [INFO][4535] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.606 [INFO][4535] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.633 [INFO][4558] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.633 [INFO][4558] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.634 [INFO][4558] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.643 [WARNING][4558] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.643 [INFO][4558] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.645 [INFO][4558] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:34.649235 env[1217]: 2025-07-15 11:26:34.647 [INFO][4535] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:34.651474 env[1217]: time="2025-07-15T11:26:34.651428856Z" level=info msg="TearDown network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" successfully" Jul 15 11:26:34.651474 env[1217]: time="2025-07-15T11:26:34.651469979Z" level=info msg="StopPodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" returns successfully" Jul 15 11:26:34.652803 env[1217]: time="2025-07-15T11:26:34.652767133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-4jcc2,Uid:d6467dfc-9bee-4f8c-a8cd-d2de95ce6517,Namespace:calico-system,Attempt:1,}" Jul 15 11:26:34.653767 systemd[1]: run-netns-cni\x2d3991ae4d\x2d8e21\x2d3b1f\x2d539f\x2dfdc0b604f253.mount: Deactivated successfully. Jul 15 11:26:34.722233 kubelet[1958]: I0715 11:26:34.722127 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:26:34.723415 kubelet[1958]: E0715 11:26:34.722686 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:34.783784 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali84b4f68edb4: link becomes ready Jul 15 11:26:34.783890 systemd-networkd[1043]: cali84b4f68edb4: Link UP Jul 15 11:26:34.784025 systemd-networkd[1043]: cali84b4f68edb4: Gained carrier Jul 15 11:26:34.790000 audit[4620]: NETFILTER_CFG table=filter:115 family=2 entries=12 op=nft_register_rule pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:34.791864 kernel: kauditd_printk_skb: 1021 callbacks suppressed Jul 15 11:26:34.791901 kernel: audit: type=1325 audit(1752578794.790:1389): table=filter:115 family=2 entries=12 op=nft_register_rule pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:34.790000 audit[4620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd06675a0 a2=0 a3=1 items=0 ppid=2109 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.797055 kernel: audit: type=1300 audit(1752578794.790:1389): arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd06675a0 a2=0 a3=1 items=0 ppid=2109 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.790000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:34.799219 kernel: audit: type=1327 audit(1752578794.790:1389): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.695 [INFO][4570] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0 calico-apiserver-7c589bcf68- calico-apiserver e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148 1065 0 2025-07-15 11:26:06 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:7c589bcf68 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-7c589bcf68-hrn2z eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali84b4f68edb4 [] [] }} ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.695 [INFO][4570] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.737 [INFO][4599] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" HandleID="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.737 [INFO][4599] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" HandleID="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001376f0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-7c589bcf68-hrn2z", "timestamp":"2025-07-15 11:26:34.737351084 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.737 [INFO][4599] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.737 [INFO][4599] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.737 [INFO][4599] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.748 [INFO][4599] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.754 [INFO][4599] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.759 [INFO][4599] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.760 [INFO][4599] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.763 [INFO][4599] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.763 [INFO][4599] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.764 [INFO][4599] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4 Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.768 [INFO][4599] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.774 [INFO][4599] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.775 [INFO][4599] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" host="localhost" Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.775 [INFO][4599] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:34.799802 env[1217]: 2025-07-15 11:26:34.775 [INFO][4599] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" HandleID="k8s-pod-network.2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.800367 env[1217]: 2025-07-15 11:26:34.778 [INFO][4570] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-7c589bcf68-hrn2z", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali84b4f68edb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:34.800367 env[1217]: 2025-07-15 11:26:34.779 [INFO][4570] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.800367 env[1217]: 2025-07-15 11:26:34.779 [INFO][4570] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali84b4f68edb4 ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.800367 env[1217]: 2025-07-15 11:26:34.780 [INFO][4570] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.800367 env[1217]: 2025-07-15 11:26:34.780 [INFO][4570] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148", ResourceVersion:"1065", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4", Pod:"calico-apiserver-7c589bcf68-hrn2z", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali84b4f68edb4", MAC:"c2:53:99:4c:67:86", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:34.800367 env[1217]: 2025-07-15 11:26:34.788 [INFO][4570] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4" Namespace="calico-apiserver" Pod="calico-apiserver-7c589bcf68-hrn2z" WorkloadEndpoint="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:34.808000 audit[4630]: NETFILTER_CFG table=filter:116 family=2 entries=53 op=nft_register_chain pid=4630 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:34.808000 audit[4630]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=26624 a0=3 a1=fffff26d1d20 a2=0 a3=ffffb2048fa8 items=0 ppid=4098 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.814176 kernel: audit: type=1325 audit(1752578794.808:1390): table=filter:116 family=2 entries=53 op=nft_register_chain pid=4630 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:34.814236 kernel: audit: type=1300 audit(1752578794.808:1390): arch=c00000b7 syscall=211 success=yes exit=26624 a0=3 a1=fffff26d1d20 a2=0 a3=ffffb2048fa8 items=0 ppid=4098 pid=4630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.814263 kernel: audit: type=1327 audit(1752578794.808:1390): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:34.808000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:34.818000 audit[4620]: NETFILTER_CFG table=nat:117 family=2 entries=58 op=nft_register_chain pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:34.818000 audit[4620]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd06675a0 a2=0 a3=1 items=0 ppid=2109 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.823219 kernel: audit: type=1325 audit(1752578794.818:1391): table=nat:117 family=2 entries=58 op=nft_register_chain pid=4620 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:34.823270 kernel: audit: type=1300 audit(1752578794.818:1391): arch=c00000b7 syscall=211 success=yes exit=20628 a0=3 a1=ffffd06675a0 a2=0 a3=1 items=0 ppid=2109 pid=4620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.818000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:34.825643 kernel: audit: type=1327 audit(1752578794.818:1391): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:34.825752 env[1217]: time="2025-07-15T11:26:34.824959408Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:34.825752 env[1217]: time="2025-07-15T11:26:34.825006171Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:34.825752 env[1217]: time="2025-07-15T11:26:34.825016371Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:34.825752 env[1217]: time="2025-07-15T11:26:34.825122857Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4 pid=4638 runtime=io.containerd.runc.v2 Jul 15 11:26:34.846281 systemd[1]: Started cri-containerd-2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4.scope. Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.878720 kernel: audit: type=1400 audit(1752578794.875:1392): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.875000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.877000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.877000 audit: BPF prog-id=212 op=LOAD Jul 15 11:26:34.878000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.878000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001c5b38 a2=10 a3=0 items=0 ppid=4638 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.878000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383566303266326261306264356235383232663465323533346230 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001c55a0 a2=3c a3=0 items=0 ppid=4638 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383566303266326261306264356235383232663465323533346230 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.881000 audit: BPF prog-id=213 op=LOAD Jul 15 11:26:34.881000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c58e0 a2=78 a3=0 items=0 ppid=4638 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.881000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383566303266326261306264356235383232663465323533346230 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit: BPF prog-id=214 op=LOAD Jul 15 11:26:34.883000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001c5670 a2=78 a3=0 items=0 ppid=4638 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383566303266326261306264356235383232663465323533346230 Jul 15 11:26:34.883000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:26:34.883000 audit: BPF prog-id=213 op=UNLOAD Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { perfmon } for pid=4646 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit[4646]: AVC avc: denied { bpf } for pid=4646 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.883000 audit: BPF prog-id=215 op=LOAD Jul 15 11:26:34.883000 audit[4646]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001c5b40 a2=78 a3=0 items=0 ppid=4638 pid=4646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.883000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383566303266326261306264356235383232663465323533346230 Jul 15 11:26:34.886497 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:34.887151 systemd-networkd[1043]: cali21d8e9fe5c9: Link UP Jul 15 11:26:34.897558 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali21d8e9fe5c9: link becomes ready Jul 15 11:26:34.888600 systemd-networkd[1043]: cali21d8e9fe5c9: Gained carrier Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.718 [INFO][4581] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0 goldmane-768f4c5c69- calico-system d6467dfc-9bee-4f8c-a8cd-d2de95ce6517 1066 0 2025-07-15 11:26:11 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-4jcc2 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali21d8e9fe5c9 [] [] }} ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.718 [INFO][4581] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.751 [INFO][4609] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" HandleID="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.751 [INFO][4609] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" HandleID="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0x40001a3630), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-4jcc2", "timestamp":"2025-07-15 11:26:34.751740426 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.751 [INFO][4609] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.775 [INFO][4609] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.775 [INFO][4609] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.848 [INFO][4609] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.857 [INFO][4609] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.861 [INFO][4609] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.863 [INFO][4609] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.865 [INFO][4609] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.865 [INFO][4609] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.867 [INFO][4609] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.871 [INFO][4609] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.878 [INFO][4609] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.878 [INFO][4609] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" host="localhost" Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.878 [INFO][4609] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:34.917401 env[1217]: 2025-07-15 11:26:34.878 [INFO][4609] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" HandleID="k8s-pod-network.d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.918085 env[1217]: 2025-07-15 11:26:34.883 [INFO][4581] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-4jcc2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali21d8e9fe5c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:34.918085 env[1217]: 2025-07-15 11:26:34.883 [INFO][4581] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.918085 env[1217]: 2025-07-15 11:26:34.883 [INFO][4581] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali21d8e9fe5c9 ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.918085 env[1217]: 2025-07-15 11:26:34.889 [INFO][4581] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.918085 env[1217]: 2025-07-15 11:26:34.899 [INFO][4581] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517", ResourceVersion:"1066", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd", Pod:"goldmane-768f4c5c69-4jcc2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali21d8e9fe5c9", MAC:"ee:c1:cb:76:3e:b0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:34.918085 env[1217]: 2025-07-15 11:26:34.909 [INFO][4581] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd" Namespace="calico-system" Pod="goldmane-768f4c5c69-4jcc2" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:34.918085 env[1217]: time="2025-07-15T11:26:34.917388127Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-7c589bcf68-hrn2z,Uid:e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4\"" Jul 15 11:26:34.939000 audit[4679]: NETFILTER_CFG table=filter:118 family=2 entries=64 op=nft_register_chain pid=4679 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:26:34.939000 audit[4679]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=31104 a0=3 a1=ffffe31b1420 a2=0 a3=ffffaecd2fa8 items=0 ppid=4098 pid=4679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.939000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:26:34.945070 env[1217]: time="2025-07-15T11:26:34.944635244Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:26:34.945070 env[1217]: time="2025-07-15T11:26:34.944683206Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:26:34.945070 env[1217]: time="2025-07-15T11:26:34.944720968Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:26:34.945070 env[1217]: time="2025-07-15T11:26:34.944871177Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd pid=4688 runtime=io.containerd.runc.v2 Jul 15 11:26:34.955611 systemd[1]: Started cri-containerd-d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd.scope. Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit: BPF prog-id=216 op=LOAD Jul 15 11:26:34.973000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.973000 audit[4697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=40001bdb38 a2=10 a3=0 items=0 ppid=4688 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.973000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433623136616565396262326262363233323935663436333135363637 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4688 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433623136616565396262326262363233323935663436333135363637 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.974000 audit: BPF prog-id=217 op=LOAD Jul 15 11:26:34.974000 audit[4697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4688 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.974000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433623136616565396262326262363233323935663436333135363637 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit: BPF prog-id=218 op=LOAD Jul 15 11:26:34.975000 audit[4697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4688 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433623136616565396262326262363233323935663436333135363637 Jul 15 11:26:34.975000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:26:34.975000 audit: BPF prog-id=217 op=UNLOAD Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { perfmon } for pid=4697 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit[4697]: AVC avc: denied { bpf } for pid=4697 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:34.975000 audit: BPF prog-id=219 op=LOAD Jul 15 11:26:34.975000 audit[4697]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4688 pid=4697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:34.975000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6433623136616565396262326262363233323935663436333135363637 Jul 15 11:26:34.977617 systemd-resolved[1160]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:26:34.993911 env[1217]: time="2025-07-15T11:26:34.993867736Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-4jcc2,Uid:d6467dfc-9bee-4f8c-a8cd-d2de95ce6517,Namespace:calico-system,Attempt:1,} returns sandbox id \"d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd\"" Jul 15 11:26:35.168875 systemd-networkd[1043]: calif5ca17d3cf9: Gained IPv6LL Jul 15 11:26:35.457151 env[1217]: time="2025-07-15T11:26:35.457110045Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.458543 env[1217]: time="2025-07-15T11:26:35.458494403Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.460080 env[1217]: time="2025-07-15T11:26:35.460052570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.461995 env[1217]: time="2025-07-15T11:26:35.461963116Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:35.462452 env[1217]: time="2025-07-15T11:26:35.462420822Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 15 11:26:35.464014 env[1217]: time="2025-07-15T11:26:35.463985189Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:26:35.464936 env[1217]: time="2025-07-15T11:26:35.464896520Z" level=info msg="CreateContainer within sandbox \"2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:26:35.474364 env[1217]: time="2025-07-15T11:26:35.474324526Z" level=info msg="CreateContainer within sandbox \"2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"ea1afe6ad348b624b34c5de29e3fe63cba231d86d24e384ca710ef22f655583c\"" Jul 15 11:26:35.474793 env[1217]: time="2025-07-15T11:26:35.474746910Z" level=info msg="StartContainer for \"ea1afe6ad348b624b34c5de29e3fe63cba231d86d24e384ca710ef22f655583c\"" Jul 15 11:26:35.490762 systemd[1]: Started cri-containerd-ea1afe6ad348b624b34c5de29e3fe63cba231d86d24e384ca710ef22f655583c.scope. Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit: BPF prog-id=220 op=LOAD Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000145b38 a2=10 a3=0 items=0 ppid=4066 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316166653661643334386236323462333463356465323965336665 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001455a0 a2=3c a3=0 items=0 ppid=4066 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316166653661643334386236323462333463356465323965336665 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit: BPF prog-id=221 op=LOAD Jul 15 11:26:35.508000 audit[4728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001458e0 a2=78 a3=0 items=0 ppid=4066 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316166653661643334386236323462333463356465323965336665 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.508000 audit: BPF prog-id=222 op=LOAD Jul 15 11:26:35.508000 audit[4728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000145670 a2=78 a3=0 items=0 ppid=4066 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.508000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316166653661643334386236323462333463356465323965336665 Jul 15 11:26:35.509000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:26:35.509000 audit: BPF prog-id=221 op=UNLOAD Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:35.509000 audit: BPF prog-id=223 op=LOAD Jul 15 11:26:35.509000 audit[4728]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000145b40 a2=78 a3=0 items=0 ppid=4066 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.509000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6561316166653661643334386236323462333463356465323965336665 Jul 15 11:26:35.536480 env[1217]: time="2025-07-15T11:26:35.536440514Z" level=info msg="StartContainer for \"ea1afe6ad348b624b34c5de29e3fe63cba231d86d24e384ca710ef22f655583c\" returns successfully" Jul 15 11:26:35.728109 kubelet[1958]: E0715 11:26:35.728011 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:26:35.750000 audit[4762]: NETFILTER_CFG table=filter:119 family=2 entries=12 op=nft_register_rule pid=4762 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:35.750000 audit[4762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=4504 a0=3 a1=ffffd9c6bd70 a2=0 a3=1 items=0 ppid=2109 pid=4762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.750000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:35.756000 audit[4762]: NETFILTER_CFG table=nat:120 family=2 entries=22 op=nft_register_rule pid=4762 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:35.756000 audit[4762]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=6540 a0=3 a1=ffffd9c6bd70 a2=0 a3=1 items=0 ppid=2109 pid=4762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:35.756000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:36.512845 systemd-networkd[1043]: cali84b4f68edb4: Gained IPv6LL Jul 15 11:26:36.833839 systemd-networkd[1043]: cali21d8e9fe5c9: Gained IPv6LL Jul 15 11:26:36.895290 env[1217]: time="2025-07-15T11:26:36.895226206Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.896580 env[1217]: time="2025-07-15T11:26:36.896555118Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.898051 env[1217]: time="2025-07-15T11:26:36.898025198Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.899427 env[1217]: time="2025-07-15T11:26:36.899393953Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:36.900001 env[1217]: time="2025-07-15T11:26:36.899975385Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:14ecfabbdbebd1f5a36708f8b11a95a43baddd6a935d7d78c89a9c333849fcd2\"" Jul 15 11:26:36.901066 env[1217]: time="2025-07-15T11:26:36.901030363Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:26:36.901979 env[1217]: time="2025-07-15T11:26:36.901947013Z" level=info msg="CreateContainer within sandbox \"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:26:36.918057 env[1217]: time="2025-07-15T11:26:36.918020770Z" level=info msg="CreateContainer within sandbox \"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"c1a8a42ae7f3c908a7aa385849ecb44695ceaa8aa7d058aae941cf56bd854b58\"" Jul 15 11:26:36.918566 env[1217]: time="2025-07-15T11:26:36.918537959Z" level=info msg="StartContainer for \"c1a8a42ae7f3c908a7aa385849ecb44695ceaa8aa7d058aae941cf56bd854b58\"" Jul 15 11:26:36.958935 systemd[1]: Started cri-containerd-c1a8a42ae7f3c908a7aa385849ecb44695ceaa8aa7d058aae941cf56bd854b58.scope. Jul 15 11:26:36.991000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.991000 audit[4771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001bd5a0 a2=3c a3=0 items=0 ppid=4479 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:36.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613861343261653766336339303861376161333835383439656362 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit: BPF prog-id=224 op=LOAD Jul 15 11:26:36.992000 audit[4771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bd8e0 a2=78 a3=0 items=0 ppid=4479 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:36.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613861343261653766336339303861376161333835383439656362 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.992000 audit: BPF prog-id=225 op=LOAD Jul 15 11:26:36.992000 audit[4771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=40001bd670 a2=78 a3=0 items=0 ppid=4479 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:36.992000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613861343261653766336339303861376161333835383439656362 Jul 15 11:26:36.993000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:26:36.993000 audit: BPF prog-id=224 op=UNLOAD Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { perfmon } for pid=4771 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit[4771]: AVC avc: denied { bpf } for pid=4771 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:36.993000 audit: BPF prog-id=226 op=LOAD Jul 15 11:26:36.993000 audit[4771]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001bdb40 a2=78 a3=0 items=0 ppid=4479 pid=4771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:36.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6331613861343261653766336339303861376161333835383439656362 Jul 15 11:26:37.017987 env[1217]: time="2025-07-15T11:26:37.017939568Z" level=info msg="StartContainer for \"c1a8a42ae7f3c908a7aa385849ecb44695ceaa8aa7d058aae941cf56bd854b58\" returns successfully" Jul 15 11:26:37.126021 env[1217]: time="2025-07-15T11:26:37.125914462Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:37.127753 env[1217]: time="2025-07-15T11:26:37.127713958Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:37.129403 env[1217]: time="2025-07-15T11:26:37.129373407Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:37.130906 env[1217]: time="2025-07-15T11:26:37.130876448Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:37.131458 env[1217]: time="2025-07-15T11:26:37.131416796Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:3371ea1b18040228ef58c964e49b96f4291def748753dfbc0aef87a55f906b8f\"" Jul 15 11:26:37.133125 env[1217]: time="2025-07-15T11:26:37.133092326Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:26:37.133906 env[1217]: time="2025-07-15T11:26:37.133876168Z" level=info msg="CreateContainer within sandbox \"2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:26:37.143847 env[1217]: time="2025-07-15T11:26:37.143771937Z" level=info msg="CreateContainer within sandbox \"2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"91cd4eb97218a5b90e0edb561414b0c70aea41fe6923e9b177efa8f0ac62da92\"" Jul 15 11:26:37.144383 env[1217]: time="2025-07-15T11:26:37.144351888Z" level=info msg="StartContainer for \"91cd4eb97218a5b90e0edb561414b0c70aea41fe6923e9b177efa8f0ac62da92\"" Jul 15 11:26:37.163415 systemd[1]: Started cri-containerd-91cd4eb97218a5b90e0edb561414b0c70aea41fe6923e9b177efa8f0ac62da92.scope. Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.180000 audit: BPF prog-id=227 op=LOAD Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4638 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931636434656239373231386135623930653065646235363134313462 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4638 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931636434656239373231386135623930653065646235363134313462 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.181000 audit: BPF prog-id=228 op=LOAD Jul 15 11:26:37.181000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4638 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.181000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931636434656239373231386135623930653065646235363134313462 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit: BPF prog-id=229 op=LOAD Jul 15 11:26:37.182000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4638 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931636434656239373231386135623930653065646235363134313462 Jul 15 11:26:37.182000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:26:37.182000 audit: BPF prog-id=228 op=UNLOAD Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:37.182000 audit: BPF prog-id=230 op=LOAD Jul 15 11:26:37.182000 audit[4805]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4638 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.182000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3931636434656239373231386135623930653065646235363134313462 Jul 15 11:26:37.208864 env[1217]: time="2025-07-15T11:26:37.208808215Z" level=info msg="StartContainer for \"91cd4eb97218a5b90e0edb561414b0c70aea41fe6923e9b177efa8f0ac62da92\" returns successfully" Jul 15 11:26:37.436000 audit[4739]: AVC avc: denied { watch } for pid=4739 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_26_18.2222771980/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c77,c347 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c77,c347 tclass=file permissive=0 Jul 15 11:26:37.436000 audit[4739]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=400126d340 a2=fc6 a3=0 items=0 ppid=4066 pid=4739 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c77,c347 key=(null) Jul 15 11:26:37.436000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:26:37.459537 kubelet[1958]: I0715 11:26:37.459475 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7c589bcf68-pc29s" podStartSLOduration=27.880818032 podStartE2EDuration="31.45946046s" podCreationTimestamp="2025-07-15 11:26:06 +0000 UTC" firstStartedPulling="2025-07-15 11:26:31.884629161 +0000 UTC m=+40.432993065" lastFinishedPulling="2025-07-15 11:26:35.463271589 +0000 UTC m=+44.011635493" observedRunningTime="2025-07-15 11:26:35.740291214 +0000 UTC m=+44.288655078" watchObservedRunningTime="2025-07-15 11:26:37.45946046 +0000 UTC m=+46.007824364" Jul 15 11:26:37.475000 audit[4840]: NETFILTER_CFG table=filter:121 family=2 entries=11 op=nft_register_rule pid=4840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:37.475000 audit[4840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=fffff1e9e0d0 a2=0 a3=1 items=0 ppid=2109 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.475000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:37.480000 audit[4840]: NETFILTER_CFG table=nat:122 family=2 entries=29 op=nft_register_chain pid=4840 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:37.480000 audit[4840]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=fffff1e9e0d0 a2=0 a3=1 items=0 ppid=2109 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:37.743331 kubelet[1958]: I0715 11:26:37.743271 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-7c589bcf68-hrn2z" podStartSLOduration=29.530655453 podStartE2EDuration="31.743256117s" podCreationTimestamp="2025-07-15 11:26:06 +0000 UTC" firstStartedPulling="2025-07-15 11:26:34.91989019 +0000 UTC m=+43.468254094" lastFinishedPulling="2025-07-15 11:26:37.132490814 +0000 UTC m=+45.680854758" observedRunningTime="2025-07-15 11:26:37.742903538 +0000 UTC m=+46.291267442" watchObservedRunningTime="2025-07-15 11:26:37.743256117 +0000 UTC m=+46.291620021" Jul 15 11:26:37.757000 audit[4848]: NETFILTER_CFG table=filter:123 family=2 entries=10 op=nft_register_rule pid=4848 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:37.757000 audit[4848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffd2064ce0 a2=0 a3=1 items=0 ppid=2109 pid=4848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.757000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:37.766000 audit[4848]: NETFILTER_CFG table=nat:124 family=2 entries=32 op=nft_register_rule pid=4848 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:37.766000 audit[4848]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=10116 a0=3 a1=ffffd2064ce0 a2=0 a3=1 items=0 ppid=2109 pid=4848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:37.766000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:37.912569 systemd[1]: run-containerd-runc-k8s.io-c1a8a42ae7f3c908a7aa385849ecb44695ceaa8aa7d058aae941cf56bd854b58-runc.jzd5Wz.mount: Deactivated successfully. Jul 15 11:26:38.040708 systemd[1]: Started sshd@9-10.0.0.138:22-10.0.0.1:49696.service. Jul 15 11:26:38.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.138:22-10.0.0.1:49696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:38.093000 audit[4850]: USER_ACCT pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.095285 sshd[4850]: Accepted publickey for core from 10.0.0.1 port 49696 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:38.095000 audit[4850]: CRED_ACQ pid=4850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.095000 audit[4850]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff85a1a70 a2=3 a3=1 items=0 ppid=1 pid=4850 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:38.095000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:38.096668 sshd[4850]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:38.104518 systemd-logind[1204]: New session 10 of user core. Jul 15 11:26:38.106367 systemd[1]: Started session-10.scope. Jul 15 11:26:38.119000 audit[4850]: USER_START pid=4850 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.122000 audit[4852]: CRED_ACQ pid=4852 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.514247 sshd[4850]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:38.514000 audit[4850]: USER_END pid=4850 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.515000 audit[4850]: CRED_DISP pid=4850 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.518277 systemd[1]: sshd@9-10.0.0.138:22-10.0.0.1:49696.service: Deactivated successfully. Jul 15 11:26:38.517000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.138:22-10.0.0.1:49696 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:38.518969 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:26:38.520899 systemd-logind[1204]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:26:38.521000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.138:22-10.0.0.1:49704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:38.522373 systemd[1]: Started sshd@10-10.0.0.138:22-10.0.0.1:49704.service. Jul 15 11:26:38.526944 systemd-logind[1204]: Removed session 10. Jul 15 11:26:38.568000 audit[4864]: USER_ACCT pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.569312 sshd[4864]: Accepted publickey for core from 10.0.0.1 port 49704 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:38.569000 audit[4864]: CRED_ACQ pid=4864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.569000 audit[4864]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd444c190 a2=3 a3=1 items=0 ppid=1 pid=4864 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:38.569000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:38.571112 sshd[4864]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:38.574751 systemd-logind[1204]: New session 11 of user core. Jul 15 11:26:38.575596 systemd[1]: Started session-11.scope. Jul 15 11:26:38.579000 audit[4864]: USER_START pid=4864 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.580000 audit[4866]: CRED_ACQ pid=4866 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.737158 kubelet[1958]: I0715 11:26:38.735946 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:26:38.835222 sshd[4864]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:38.835000 audit[4864]: USER_END pid=4864 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.835000 audit[4864]: CRED_DISP pid=4864 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.836932 kubelet[1958]: I0715 11:26:38.836395 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:26:38.840000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.138:22-10.0.0.1:49720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:38.841504 systemd[1]: Started sshd@11-10.0.0.138:22-10.0.0.1:49720.service. Jul 15 11:26:38.844071 systemd[1]: sshd@10-10.0.0.138:22-10.0.0.1:49704.service: Deactivated successfully. Jul 15 11:26:38.843000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.138:22-10.0.0.1:49704 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:38.844780 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:26:38.845571 systemd-logind[1204]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:26:38.846517 systemd-logind[1204]: Removed session 11. Jul 15 11:26:38.890000 audit[4874]: USER_ACCT pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.891654 sshd[4874]: Accepted publickey for core from 10.0.0.1 port 49720 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:38.891000 audit[4874]: CRED_ACQ pid=4874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.891000 audit[4874]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff68734e0 a2=3 a3=1 items=0 ppid=1 pid=4874 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:38.891000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:38.892838 sshd[4874]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:38.899514 systemd-logind[1204]: New session 12 of user core. Jul 15 11:26:38.899945 systemd[1]: Started session-12.scope. Jul 15 11:26:38.906000 audit[4874]: USER_START pid=4874 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.907000 audit[4896]: CRED_ACQ pid=4896 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:38.996879 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1522590668.mount: Deactivated successfully. Jul 15 11:26:39.111454 sshd[4874]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:39.111000 audit[4874]: USER_END pid=4874 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:39.112000 audit[4874]: CRED_DISP pid=4874 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:39.114136 systemd[1]: sshd@11-10.0.0.138:22-10.0.0.1:49720.service: Deactivated successfully. Jul 15 11:26:39.114923 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:26:39.113000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.138:22-10.0.0.1:49720 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.115769 systemd-logind[1204]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:26:39.116818 systemd-logind[1204]: Removed session 12. Jul 15 11:26:39.550000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_26_18.576547457/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c192,c234 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c192,c234 tclass=file permissive=0 Jul 15 11:26:39.550000 audit[4816]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=7 a1=40007d6c60 a2=fc6 a3=0 items=0 ppid=4638 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c192,c234 key=(null) Jul 15 11:26:39.550000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:26:39.608141 env[1217]: time="2025-07-15T11:26:39.608097488Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:39.609442 env[1217]: time="2025-07-15T11:26:39.609412315Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:39.612038 env[1217]: time="2025-07-15T11:26:39.612008009Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:39.613890 env[1217]: time="2025-07-15T11:26:39.613850263Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:39.614626 env[1217]: time="2025-07-15T11:26:39.614572301Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:1389d38feb576cfff09a57a2c028a53e51a72c658f295166960f770eaf07985f\"" Jul 15 11:26:39.616218 env[1217]: time="2025-07-15T11:26:39.616018135Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:26:39.617503 env[1217]: time="2025-07-15T11:26:39.617467289Z" level=info msg="CreateContainer within sandbox \"d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:26:39.628881 env[1217]: time="2025-07-15T11:26:39.628848595Z" level=info msg="CreateContainer within sandbox \"d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"b778f0ecba3f44d9d1e7c94fff3c03ab92c8ef99b2bdafe74c48719a188520e2\"" Jul 15 11:26:39.629394 env[1217]: time="2025-07-15T11:26:39.629366861Z" level=info msg="StartContainer for \"b778f0ecba3f44d9d1e7c94fff3c03ab92c8ef99b2bdafe74c48719a188520e2\"" Jul 15 11:26:39.646316 systemd[1]: Started cri-containerd-b778f0ecba3f44d9d1e7c94fff3c03ab92c8ef99b2bdafe74c48719a188520e2.scope. Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.664000 audit: BPF prog-id=231 op=LOAD Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=0 a0=f a1=4000195b38 a2=10 a3=0 items=0 ppid=4688 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237373866306563626133663434643964316537633934666666336330 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4688 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237373866306563626133663434643964316537633934666666336330 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit: BPF prog-id=232 op=LOAD Jul 15 11:26:39.665000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4688 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237373866306563626133663434643964316537633934666666336330 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit: BPF prog-id=233 op=LOAD Jul 15 11:26:39.665000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=18 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4688 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237373866306563626133663434643964316537633934666666336330 Jul 15 11:26:39.665000 audit: BPF prog-id=233 op=UNLOAD Jul 15 11:26:39.665000 audit: BPF prog-id=232 op=UNLOAD Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { perfmon } for pid=4935 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit[4935]: AVC avc: denied { bpf } for pid=4935 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:39.665000 audit: BPF prog-id=234 op=LOAD Jul 15 11:26:39.665000 audit[4935]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=16 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4688 pid=4935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6237373866306563626133663434643964316537633934666666336330 Jul 15 11:26:39.687606 env[1217]: time="2025-07-15T11:26:39.687560333Z" level=info msg="StartContainer for \"b778f0ecba3f44d9d1e7c94fff3c03ab92c8ef99b2bdafe74c48719a188520e2\" returns successfully" Jul 15 11:26:39.759000 audit[4968]: NETFILTER_CFG table=filter:125 family=2 entries=10 op=nft_register_rule pid=4968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:39.759000 audit[4968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffe13f17b0 a2=0 a3=1 items=0 ppid=2109 pid=4968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.759000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:39.778000 audit[4968]: NETFILTER_CFG table=nat:126 family=2 entries=24 op=nft_register_rule pid=4968 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:39.778000 audit[4968]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe13f17b0 a2=0 a3=1 items=0 ppid=2109 pid=4968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:39.778000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:40.756177 systemd[1]: run-containerd-runc-k8s.io-b778f0ecba3f44d9d1e7c94fff3c03ab92c8ef99b2bdafe74c48719a188520e2-runc.6Sl1Oy.mount: Deactivated successfully. Jul 15 11:26:40.839877 env[1217]: time="2025-07-15T11:26:40.839840633Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:40.842755 env[1217]: time="2025-07-15T11:26:40.842724658Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:40.844126 env[1217]: time="2025-07-15T11:26:40.844096448Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:40.846931 env[1217]: time="2025-07-15T11:26:40.846067547Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:26:40.846931 env[1217]: time="2025-07-15T11:26:40.846484488Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:664ed31fb4687b0de23d6e6e116bc87b236790d7355871d3237c54452e02e27c\"" Jul 15 11:26:40.849820 env[1217]: time="2025-07-15T11:26:40.849783095Z" level=info msg="CreateContainer within sandbox \"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:26:40.861046 env[1217]: time="2025-07-15T11:26:40.860225342Z" level=info msg="CreateContainer within sandbox \"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"98141ffd1498703b1d58ca764597faf9d24d957c45a4ba7c45aba64656cbeaf3\"" Jul 15 11:26:40.862562 env[1217]: time="2025-07-15T11:26:40.862520818Z" level=info msg="StartContainer for \"98141ffd1498703b1d58ca764597faf9d24d957c45a4ba7c45aba64656cbeaf3\"" Jul 15 11:26:40.886532 systemd[1]: Started cri-containerd-98141ffd1498703b1d58ca764597faf9d24d957c45a4ba7c45aba64656cbeaf3.scope. Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.907463 kernel: kauditd_printk_skb: 393 callbacks suppressed Jul 15 11:26:40.907535 kernel: audit: type=1400 audit(1752578800.903:1526): avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.907563 kernel: audit: type=1300 audit(1752578800.903:1526): arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4479 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:40.903000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=0 a1=40001955a0 a2=3c a3=0 items=0 ppid=4479 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:40.910115 kernel: audit: type=1327 audit(1752578800.903:1526): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938313431666664313439383730336231643538636137363435393766 Jul 15 11:26:40.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938313431666664313439383730336231643538636137363435393766 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.914176 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.914245 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.917854 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.917929 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.921244 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.921317 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.925041 env[1217]: time="2025-07-15T11:26:40.924794521Z" level=info msg="StartContainer for \"98141ffd1498703b1d58ca764597faf9d24d957c45a4ba7c45aba64656cbeaf3\" returns successfully" Jul 15 11:26:40.925203 kernel: audit: type=1400 audit(1752578800.903:1527): avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit: BPF prog-id=235 op=LOAD Jul 15 11:26:40.903000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=40001958e0 a2=78 a3=0 items=0 ppid=4479 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:40.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938313431666664313439383730336231643538636137363435393766 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.903000 audit: BPF prog-id=236 op=LOAD Jul 15 11:26:40.903000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=17 a0=5 a1=4000195670 a2=78 a3=0 items=0 ppid=4479 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:40.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938313431666664313439383730336231643538636137363435393766 Jul 15 11:26:40.906000 audit: BPF prog-id=236 op=UNLOAD Jul 15 11:26:40.906000 audit: BPF prog-id=235 op=UNLOAD Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { perfmon } for pid=5005 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit[5005]: AVC avc: denied { bpf } for pid=5005 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:26:40.906000 audit: BPF prog-id=237 op=LOAD Jul 15 11:26:40.906000 audit[5005]: SYSCALL arch=c00000b7 syscall=280 success=yes exit=15 a0=5 a1=4000195b40 a2=78 a3=0 items=0 ppid=4479 pid=5005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:40.906000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3938313431666664313439383730336231643538636137363435393766 Jul 15 11:26:41.610769 kubelet[1958]: I0715 11:26:41.610731 1958 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:26:41.611858 kubelet[1958]: I0715 11:26:41.611834 1958 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:26:41.762659 systemd[1]: run-containerd-runc-k8s.io-b778f0ecba3f44d9d1e7c94fff3c03ab92c8ef99b2bdafe74c48719a188520e2-runc.8wgrQ9.mount: Deactivated successfully. Jul 15 11:26:41.813077 kubelet[1958]: I0715 11:26:41.813002 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-7vgn6" podStartSLOduration=24.811824523 podStartE2EDuration="31.812987245s" podCreationTimestamp="2025-07-15 11:26:10 +0000 UTC" firstStartedPulling="2025-07-15 11:26:33.846476105 +0000 UTC m=+42.394839969" lastFinishedPulling="2025-07-15 11:26:40.847638787 +0000 UTC m=+49.396002691" observedRunningTime="2025-07-15 11:26:41.812934482 +0000 UTC m=+50.361298386" watchObservedRunningTime="2025-07-15 11:26:41.812987245 +0000 UTC m=+50.361351149" Jul 15 11:26:41.813283 kubelet[1958]: I0715 11:26:41.813253 1958 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-4jcc2" podStartSLOduration=26.192306406 podStartE2EDuration="30.813247698s" podCreationTimestamp="2025-07-15 11:26:11 +0000 UTC" firstStartedPulling="2025-07-15 11:26:34.994878433 +0000 UTC m=+43.543242337" lastFinishedPulling="2025-07-15 11:26:39.615819725 +0000 UTC m=+48.164183629" observedRunningTime="2025-07-15 11:26:39.753949987 +0000 UTC m=+48.302313891" watchObservedRunningTime="2025-07-15 11:26:41.813247698 +0000 UTC m=+50.361611562" Jul 15 11:26:44.116472 systemd[1]: Started sshd@12-10.0.0.138:22-10.0.0.1:33754.service. Jul 15 11:26:44.114000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.138:22-10.0.0.1:33754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:44.163000 audit[5071]: USER_ACCT pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:44.166078 sshd[5071]: Accepted publickey for core from 10.0.0.1 port 33754 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:44.165000 audit[5071]: CRED_ACQ pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:44.165000 audit[5071]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff09b7ad0 a2=3 a3=1 items=0 ppid=1 pid=5071 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:44.165000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:44.167934 sshd[5071]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:44.173080 systemd-logind[1204]: New session 13 of user core. Jul 15 11:26:44.173998 systemd[1]: Started session-13.scope. Jul 15 11:26:44.176000 audit[5071]: USER_START pid=5071 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:44.178000 audit[5073]: CRED_ACQ pid=5073 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:44.446311 sshd[5071]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:44.446000 audit[5071]: USER_END pid=5071 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:44.446000 audit[5071]: CRED_DISP pid=5071 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:44.449862 systemd[1]: sshd@12-10.0.0.138:22-10.0.0.1:33754.service: Deactivated successfully. Jul 15 11:26:44.448000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.138:22-10.0.0.1:33754 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:44.450970 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:26:44.451716 systemd-logind[1204]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:26:44.452449 systemd-logind[1204]: Removed session 13. Jul 15 11:26:48.581000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.585066 kernel: kauditd_printk_skb: 44 callbacks suppressed Jul 15 11:26:48.585154 kernel: audit: type=1400 audit(1752578808.581:1541): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.585180 kernel: audit: type=1400 audit(1752578808.581:1542): avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.581000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.587337 kernel: audit: type=1300 audit(1752578808.581:1541): arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4003196dc0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:48.581000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=c a1=4003196dc0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:48.581000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:48.592643 kernel: audit: type=1327 audit(1752578808.581:1541): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:48.592702 kernel: audit: type=1300 audit(1752578808.581:1542): arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002da41e0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:48.581000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=b a1=4002da41e0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:48.595489 kernel: audit: type=1327 audit(1752578808.581:1542): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:48.581000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:48.966000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.966000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=4010c87500 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:48.973235 kernel: audit: type=1400 audit(1752578808.966:1543): avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.973337 kernel: audit: type=1300 audit(1752578808.966:1543): arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=4010c87500 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:48.973396 kernel: audit: type=1327 audit(1752578808.966:1543): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:48.966000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:48.967000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.978064 kernel: audit: type=1400 audit(1752578808.967:1544): avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=7306 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.967000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=4010c87560 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:48.967000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:48.974000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.974000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=4012e9bb00 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:48.974000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:48.975000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=7312 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:48.975000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=4010c87680 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:48.975000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:49.032000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=7310 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:49.032000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=83 a1=40106459b0 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:49.032000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:49.032000 audit[1832]: AVC avc: denied { watch } for pid=1832 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:49.032000 audit[1832]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=84 a1=4012e9be40 a2=fc6 a3=0 items=0 ppid=1681 pid=1832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c220,c308 key=(null) Jul 15 11:26:49.032000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E313338002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B75626572 Jul 15 11:26:49.451671 systemd[1]: Started sshd@13-10.0.0.138:22-10.0.0.1:33770.service. Jul 15 11:26:49.451000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.138:22-10.0.0.1:33770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.494000 audit[5087]: USER_ACCT pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:49.495326 sshd[5087]: Accepted publickey for core from 10.0.0.1 port 33770 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:49.495000 audit[5087]: CRED_ACQ pid=5087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:49.495000 audit[5087]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=fffff3d03410 a2=3 a3=1 items=0 ppid=1 pid=5087 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:49.495000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:49.496869 sshd[5087]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:49.500371 systemd-logind[1204]: New session 14 of user core. Jul 15 11:26:49.500821 systemd[1]: Started session-14.scope. Jul 15 11:26:49.503000 audit[5087]: USER_START pid=5087 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:49.504000 audit[5089]: CRED_ACQ pid=5089 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:49.635820 sshd[5087]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:49.635000 audit[5087]: USER_END pid=5087 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:49.635000 audit[5087]: CRED_DISP pid=5087 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:49.638195 systemd[1]: sshd@13-10.0.0.138:22-10.0.0.1:33770.service: Deactivated successfully. Jul 15 11:26:49.637000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.138:22-10.0.0.1:33770 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.638971 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:26:49.639510 systemd-logind[1204]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:26:49.640228 systemd-logind[1204]: Removed session 14. Jul 15 11:26:51.521920 env[1217]: time="2025-07-15T11:26:51.521869377Z" level=info msg="StopPodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\"" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.578 [WARNING][5110] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0", GenerateName:"calico-kube-controllers-744c4f5c87-", Namespace:"calico-system", SelfLink:"", UID:"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670", ResourceVersion:"1133", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"744c4f5c87", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b", Pod:"calico-kube-controllers-744c4f5c87-8qkfz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calife137dd056d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.578 [INFO][5110] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.579 [INFO][5110] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" iface="eth0" netns="" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.579 [INFO][5110] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.579 [INFO][5110] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.600 [INFO][5120] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.600 [INFO][5120] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.600 [INFO][5120] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.608 [WARNING][5120] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.608 [INFO][5120] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.610 [INFO][5120] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:51.614034 env[1217]: 2025-07-15 11:26:51.612 [INFO][5110] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.614539 env[1217]: time="2025-07-15T11:26:51.614057973Z" level=info msg="TearDown network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" successfully" Jul 15 11:26:51.614539 env[1217]: time="2025-07-15T11:26:51.614086214Z" level=info msg="StopPodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" returns successfully" Jul 15 11:26:51.614626 env[1217]: time="2025-07-15T11:26:51.614579755Z" level=info msg="RemovePodSandbox for \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\"" Jul 15 11:26:51.614706 env[1217]: time="2025-07-15T11:26:51.614615557Z" level=info msg="Forcibly stopping sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\"" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.645 [WARNING][5137] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0", GenerateName:"calico-kube-controllers-744c4f5c87-", Namespace:"calico-system", SelfLink:"", UID:"ae2ac006-70eb-4fa6-88cc-c3fd68d2d670", ResourceVersion:"1133", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"744c4f5c87", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c42cb4c4670e50718a77aa5b634edfe672bbe23ee4889ae24469e505164e788b", Pod:"calico-kube-controllers-744c4f5c87-8qkfz", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calife137dd056d", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.646 [INFO][5137] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.646 [INFO][5137] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" iface="eth0" netns="" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.646 [INFO][5137] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.646 [INFO][5137] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.665 [INFO][5146] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.665 [INFO][5146] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.666 [INFO][5146] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.674 [WARNING][5146] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.674 [INFO][5146] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" HandleID="k8s-pod-network.054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Workload="localhost-k8s-calico--kube--controllers--744c4f5c87--8qkfz-eth0" Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.675 [INFO][5146] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:51.678714 env[1217]: 2025-07-15 11:26:51.677 [INFO][5137] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0" Jul 15 11:26:51.679135 env[1217]: time="2025-07-15T11:26:51.678745177Z" level=info msg="TearDown network for sandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" successfully" Jul 15 11:26:51.686915 env[1217]: time="2025-07-15T11:26:51.686870209Z" level=info msg="RemovePodSandbox \"054fdfe15c9c1bf9394989987a297386712ac9339dd2c8e3186690e81e97bbc0\" returns successfully" Jul 15 11:26:51.687618 env[1217]: time="2025-07-15T11:26:51.687581400Z" level=info msg="StopPodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\"" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.726 [WARNING][5164] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jt247-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4a9557ee-7213-48c8-9ffc-d913ee220542", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21", Pod:"coredns-668d6bf9bc-jt247", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac468ed7432", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.726 [INFO][5164] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.726 [INFO][5164] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" iface="eth0" netns="" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.726 [INFO][5164] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.726 [INFO][5164] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.743 [INFO][5174] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.743 [INFO][5174] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.743 [INFO][5174] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.751 [WARNING][5174] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.751 [INFO][5174] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.754 [INFO][5174] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:51.758065 env[1217]: 2025-07-15 11:26:51.756 [INFO][5164] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.758745 env[1217]: time="2025-07-15T11:26:51.758679761Z" level=info msg="TearDown network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" successfully" Jul 15 11:26:51.758830 env[1217]: time="2025-07-15T11:26:51.758813087Z" level=info msg="StopPodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" returns successfully" Jul 15 11:26:51.759265 env[1217]: time="2025-07-15T11:26:51.759240946Z" level=info msg="RemovePodSandbox for \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\"" Jul 15 11:26:51.759446 env[1217]: time="2025-07-15T11:26:51.759395792Z" level=info msg="Forcibly stopping sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\"" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.793 [WARNING][5192] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jt247-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"4a9557ee-7213-48c8-9ffc-d913ee220542", ResourceVersion:"1055", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2975afa39fabb108abe98dd0bf132245c6648bc457b456bbb744b28376695a21", Pod:"coredns-668d6bf9bc-jt247", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"caliac468ed7432", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.793 [INFO][5192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.793 [INFO][5192] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" iface="eth0" netns="" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.793 [INFO][5192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.793 [INFO][5192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.810 [INFO][5201] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.810 [INFO][5201] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.811 [INFO][5201] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.818 [WARNING][5201] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.818 [INFO][5201] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" HandleID="k8s-pod-network.4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Workload="localhost-k8s-coredns--668d6bf9bc--jt247-eth0" Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.820 [INFO][5201] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:51.824386 env[1217]: 2025-07-15 11:26:51.822 [INFO][5192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa" Jul 15 11:26:51.825970 env[1217]: time="2025-07-15T11:26:51.825933916Z" level=info msg="TearDown network for sandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" successfully" Jul 15 11:26:51.828879 env[1217]: time="2025-07-15T11:26:51.828844483Z" level=info msg="RemovePodSandbox \"4ab8ba60d18741f459c500d2fbc66e8ff91f188613a55c86e54eb12aecb0acaa\" returns successfully" Jul 15 11:26:51.829423 env[1217]: time="2025-07-15T11:26:51.829386106Z" level=info msg="StopPodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\"" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.860 [WARNING][5219] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c919c5bb-fa83-4310-af91-85adfca12313", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6", Pod:"coredns-668d6bf9bc-jwj5w", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calida2b34d318e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.860 [INFO][5219] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.860 [INFO][5219] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" iface="eth0" netns="" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.860 [INFO][5219] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.860 [INFO][5219] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.877 [INFO][5227] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.877 [INFO][5227] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.877 [INFO][5227] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.886 [WARNING][5227] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.886 [INFO][5227] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.887 [INFO][5227] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:51.890807 env[1217]: 2025-07-15 11:26:51.889 [INFO][5219] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.891568 env[1217]: time="2025-07-15T11:26:51.890833489Z" level=info msg="TearDown network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" successfully" Jul 15 11:26:51.891568 env[1217]: time="2025-07-15T11:26:51.890862691Z" level=info msg="StopPodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" returns successfully" Jul 15 11:26:51.891568 env[1217]: time="2025-07-15T11:26:51.891446636Z" level=info msg="RemovePodSandbox for \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\"" Jul 15 11:26:51.891568 env[1217]: time="2025-07-15T11:26:51.891481357Z" level=info msg="Forcibly stopping sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\"" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.922 [WARNING][5245] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"c919c5bb-fa83-4310-af91-85adfca12313", ResourceVersion:"1001", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 25, 58, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3e018cc5a07363bba96f6b511aea8cde98303a510dfd764802447155b267b8e6", Pod:"coredns-668d6bf9bc-jwj5w", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calida2b34d318e", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.922 [INFO][5245] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.922 [INFO][5245] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" iface="eth0" netns="" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.922 [INFO][5245] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.922 [INFO][5245] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.941 [INFO][5254] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.941 [INFO][5254] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.941 [INFO][5254] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.949 [WARNING][5254] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.949 [INFO][5254] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" HandleID="k8s-pod-network.1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Workload="localhost-k8s-coredns--668d6bf9bc--jwj5w-eth0" Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.951 [INFO][5254] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:51.956067 env[1217]: 2025-07-15 11:26:51.954 [INFO][5245] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc" Jul 15 11:26:51.956491 env[1217]: time="2025-07-15T11:26:51.956082197Z" level=info msg="TearDown network for sandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" successfully" Jul 15 11:26:51.959104 env[1217]: time="2025-07-15T11:26:51.959068527Z" level=info msg="RemovePodSandbox \"1b413112bb27bb8e7a869a1869ddb2527e26e1004a4b7b75e864a092eed771dc\" returns successfully" Jul 15 11:26:51.959573 env[1217]: time="2025-07-15T11:26:51.959543147Z" level=info msg="StopPodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\"" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:51.990 [WARNING][5272] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"5276840e-1028-40c8-aa96-d1965cf900f0", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e", Pod:"calico-apiserver-7c589bcf68-pc29s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6cf8b9cb2dd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:51.990 [INFO][5272] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:51.990 [INFO][5272] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" iface="eth0" netns="" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:51.990 [INFO][5272] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:51.990 [INFO][5272] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.008 [INFO][5281] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.008 [INFO][5281] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.008 [INFO][5281] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.016 [WARNING][5281] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.016 [INFO][5281] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.017 [INFO][5281] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.020798 env[1217]: 2025-07-15 11:26:52.019 [INFO][5272] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.021213 env[1217]: time="2025-07-15T11:26:52.020824795Z" level=info msg="TearDown network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" successfully" Jul 15 11:26:52.021213 env[1217]: time="2025-07-15T11:26:52.020852836Z" level=info msg="StopPodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" returns successfully" Jul 15 11:26:52.021712 env[1217]: time="2025-07-15T11:26:52.021671071Z" level=info msg="RemovePodSandbox for \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\"" Jul 15 11:26:52.021790 env[1217]: time="2025-07-15T11:26:52.021721233Z" level=info msg="Forcibly stopping sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\"" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.051 [WARNING][5298] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"5276840e-1028-40c8-aa96-d1965cf900f0", ResourceVersion:"1103", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ce39aa2a2abb78feb9c0c9fa500fd164ba63c7886c0ed781fee69e8d16ebe7e", Pod:"calico-apiserver-7c589bcf68-pc29s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali6cf8b9cb2dd", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.051 [INFO][5298] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.051 [INFO][5298] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" iface="eth0" netns="" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.051 [INFO][5298] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.051 [INFO][5298] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.071 [INFO][5307] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.072 [INFO][5307] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.072 [INFO][5307] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.079 [WARNING][5307] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.079 [INFO][5307] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" HandleID="k8s-pod-network.3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Workload="localhost-k8s-calico--apiserver--7c589bcf68--pc29s-eth0" Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.081 [INFO][5307] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.084721 env[1217]: 2025-07-15 11:26:52.082 [INFO][5298] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10" Jul 15 11:26:52.084721 env[1217]: time="2025-07-15T11:26:52.084687695Z" level=info msg="TearDown network for sandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" successfully" Jul 15 11:26:52.087418 env[1217]: time="2025-07-15T11:26:52.087390451Z" level=info msg="RemovePodSandbox \"3e802ae80aed7ef3f705cf3a0ee7b18c7f7f420a69f5352f094ede41e9fa8e10\" returns successfully" Jul 15 11:26:52.087918 env[1217]: time="2025-07-15T11:26:52.087889673Z" level=info msg="StopPodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\"" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.121 [WARNING][5325] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4", Pod:"calico-apiserver-7c589bcf68-hrn2z", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali84b4f68edb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.121 [INFO][5325] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.121 [INFO][5325] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" iface="eth0" netns="" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.121 [INFO][5325] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.121 [INFO][5325] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.141 [INFO][5334] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.141 [INFO][5334] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.141 [INFO][5334] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.149 [WARNING][5334] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.149 [INFO][5334] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.150 [INFO][5334] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.153968 env[1217]: 2025-07-15 11:26:52.152 [INFO][5325] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.154374 env[1217]: time="2025-07-15T11:26:52.153997590Z" level=info msg="TearDown network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" successfully" Jul 15 11:26:52.154374 env[1217]: time="2025-07-15T11:26:52.154031631Z" level=info msg="StopPodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" returns successfully" Jul 15 11:26:52.154835 env[1217]: time="2025-07-15T11:26:52.154786024Z" level=info msg="RemovePodSandbox for \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\"" Jul 15 11:26:52.154912 env[1217]: time="2025-07-15T11:26:52.154828385Z" level=info msg="Forcibly stopping sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\"" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.188 [WARNING][5353] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0", GenerateName:"calico-apiserver-7c589bcf68-", Namespace:"calico-apiserver", SelfLink:"", UID:"e4a0aa31-fd4c-491f-8b8a-5e3ff09d4148", ResourceVersion:"1115", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 6, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"7c589bcf68", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2585f02f2ba0bd5b5822f4e2534b039e29c9967853c45838c3350eb8a7306ec4", Pod:"calico-apiserver-7c589bcf68-hrn2z", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali84b4f68edb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.188 [INFO][5353] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.188 [INFO][5353] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" iface="eth0" netns="" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.188 [INFO][5353] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.188 [INFO][5353] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.205 [INFO][5363] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.206 [INFO][5363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.206 [INFO][5363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.217 [WARNING][5363] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.217 [INFO][5363] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" HandleID="k8s-pod-network.52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Workload="localhost-k8s-calico--apiserver--7c589bcf68--hrn2z-eth0" Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.218 [INFO][5363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.222203 env[1217]: 2025-07-15 11:26:52.220 [INFO][5353] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16" Jul 15 11:26:52.222621 env[1217]: time="2025-07-15T11:26:52.222230998Z" level=info msg="TearDown network for sandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" successfully" Jul 15 11:26:52.226811 env[1217]: time="2025-07-15T11:26:52.226781273Z" level=info msg="RemovePodSandbox \"52daf23fb18cd79b63b62fb56959cc81a70322f7c1cafbf987378b396a1c3f16\" returns successfully" Jul 15 11:26:52.227287 env[1217]: time="2025-07-15T11:26:52.227263934Z" level=info msg="StopPodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\"" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.257 [WARNING][5381] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" WorkloadEndpoint="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.257 [INFO][5381] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.257 [INFO][5381] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" iface="eth0" netns="" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.257 [INFO][5381] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.257 [INFO][5381] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.274 [INFO][5390] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.275 [INFO][5390] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.275 [INFO][5390] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.283 [WARNING][5390] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.283 [INFO][5390] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.284 [INFO][5390] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.288075 env[1217]: 2025-07-15 11:26:52.286 [INFO][5381] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.288433 env[1217]: time="2025-07-15T11:26:52.288100264Z" level=info msg="TearDown network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" successfully" Jul 15 11:26:52.288433 env[1217]: time="2025-07-15T11:26:52.288130906Z" level=info msg="StopPodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" returns successfully" Jul 15 11:26:52.288640 env[1217]: time="2025-07-15T11:26:52.288585725Z" level=info msg="RemovePodSandbox for \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\"" Jul 15 11:26:52.288709 env[1217]: time="2025-07-15T11:26:52.288632567Z" level=info msg="Forcibly stopping sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\"" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.316 [WARNING][5408] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" WorkloadEndpoint="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.317 [INFO][5408] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.317 [INFO][5408] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" iface="eth0" netns="" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.317 [INFO][5408] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.317 [INFO][5408] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.333 [INFO][5416] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.333 [INFO][5416] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.333 [INFO][5416] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.342 [WARNING][5416] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.342 [INFO][5416] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" HandleID="k8s-pod-network.8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Workload="localhost-k8s-whisker--5c5cddb84f--rkk56-eth0" Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.343 [INFO][5416] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.347466 env[1217]: 2025-07-15 11:26:52.345 [INFO][5408] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd" Jul 15 11:26:52.347915 env[1217]: time="2025-07-15T11:26:52.347878150Z" level=info msg="TearDown network for sandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" successfully" Jul 15 11:26:52.351427 env[1217]: time="2025-07-15T11:26:52.351394700Z" level=info msg="RemovePodSandbox \"8110b19b10656b3a78e7b1cae65ac137653dfcbde004286a06a82f55f7f8ccbd\" returns successfully" Jul 15 11:26:52.351981 env[1217]: time="2025-07-15T11:26:52.351958845Z" level=info msg="StopPodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\"" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.383 [WARNING][5435] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517", ResourceVersion:"1143", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd", Pod:"goldmane-768f4c5c69-4jcc2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali21d8e9fe5c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.383 [INFO][5435] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.383 [INFO][5435] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" iface="eth0" netns="" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.383 [INFO][5435] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.383 [INFO][5435] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.400 [INFO][5444] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.400 [INFO][5444] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.400 [INFO][5444] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.408 [WARNING][5444] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.408 [INFO][5444] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.409 [INFO][5444] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.413400 env[1217]: 2025-07-15 11:26:52.411 [INFO][5435] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.413834 env[1217]: time="2025-07-15T11:26:52.413427482Z" level=info msg="TearDown network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" successfully" Jul 15 11:26:52.413834 env[1217]: time="2025-07-15T11:26:52.413464804Z" level=info msg="StopPodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" returns successfully" Jul 15 11:26:52.414061 env[1217]: time="2025-07-15T11:26:52.414029828Z" level=info msg="RemovePodSandbox for \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\"" Jul 15 11:26:52.414172 env[1217]: time="2025-07-15T11:26:52.414134513Z" level=info msg="Forcibly stopping sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\"" Jul 15 11:26:52.435000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.435000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4000c0b680 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:52.435000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.435000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.435000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400188e680 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:52.435000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.435000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.435000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=a a1=400188e6a0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:52.435000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.436000 audit[1838]: AVC avc: denied { watch } for pid=1838 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=7304 scontext=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:26:52.436000 audit[1838]: SYSCALL arch=c00000b7 syscall=27 success=no exit=-13 a0=9 a1=4003196de0 a2=fc6 a3=0 items=0 ppid=1671 pid=1838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c156,c931 key=(null) Jul 15 11:26:52.436000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.443 [WARNING][5461] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"d6467dfc-9bee-4f8c-a8cd-d2de95ce6517", ResourceVersion:"1143", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d3b16aee9bb2bb623295f4631566701c89cf2f91590836274dfb6c36d6dd29fd", Pod:"goldmane-768f4c5c69-4jcc2", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali21d8e9fe5c9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.443 [INFO][5461] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.443 [INFO][5461] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" iface="eth0" netns="" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.443 [INFO][5461] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.443 [INFO][5461] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.463 [INFO][5470] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.463 [INFO][5470] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.464 [INFO][5470] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.471 [WARNING][5470] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.471 [INFO][5470] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" HandleID="k8s-pod-network.e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Workload="localhost-k8s-goldmane--768f4c5c69--4jcc2-eth0" Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.473 [INFO][5470] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.476749 env[1217]: 2025-07-15 11:26:52.475 [INFO][5461] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4" Jul 15 11:26:52.477219 env[1217]: time="2025-07-15T11:26:52.477175858Z" level=info msg="TearDown network for sandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" successfully" Jul 15 11:26:52.480193 env[1217]: time="2025-07-15T11:26:52.480164306Z" level=info msg="RemovePodSandbox \"e4ccb7c06f381b5d27c247646b918e5970637327573cf7ceaf315c800931c8b4\" returns successfully" Jul 15 11:26:52.480782 env[1217]: time="2025-07-15T11:26:52.480751852Z" level=info msg="StopPodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\"" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.512 [WARNING][5487] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7vgn6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f950f0d3-7bd4-45b0-9b8d-5674d38b8105", ResourceVersion:"1159", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4", Pod:"csi-node-driver-7vgn6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5ca17d3cf9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.512 [INFO][5487] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.512 [INFO][5487] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" iface="eth0" netns="" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.512 [INFO][5487] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.512 [INFO][5487] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.529 [INFO][5495] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.529 [INFO][5495] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.529 [INFO][5495] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.537 [WARNING][5495] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.537 [INFO][5495] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.539 [INFO][5495] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.542539 env[1217]: 2025-07-15 11:26:52.540 [INFO][5487] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.543214 env[1217]: time="2025-07-15T11:26:52.543169570Z" level=info msg="TearDown network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" successfully" Jul 15 11:26:52.543288 env[1217]: time="2025-07-15T11:26:52.543272334Z" level=info msg="StopPodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" returns successfully" Jul 15 11:26:52.543838 env[1217]: time="2025-07-15T11:26:52.543809957Z" level=info msg="RemovePodSandbox for \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\"" Jul 15 11:26:52.543902 env[1217]: time="2025-07-15T11:26:52.543846719Z" level=info msg="Forcibly stopping sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\"" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.575 [WARNING][5513] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--7vgn6-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"f950f0d3-7bd4-45b0-9b8d-5674d38b8105", ResourceVersion:"1159", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 26, 10, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"8de95ae7ea4176d3684e9a9e066e8c17aa16e3920a7941408c15496001a629d4", Pod:"csi-node-driver-7vgn6", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"calif5ca17d3cf9", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.575 [INFO][5513] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.575 [INFO][5513] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" iface="eth0" netns="" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.575 [INFO][5513] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.575 [INFO][5513] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.591 [INFO][5522] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.592 [INFO][5522] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.592 [INFO][5522] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.601 [WARNING][5522] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.601 [INFO][5522] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" HandleID="k8s-pod-network.0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Workload="localhost-k8s-csi--node--driver--7vgn6-eth0" Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.602 [INFO][5522] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:26:52.606724 env[1217]: 2025-07-15 11:26:52.604 [INFO][5513] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a" Jul 15 11:26:52.606724 env[1217]: time="2025-07-15T11:26:52.606655694Z" level=info msg="TearDown network for sandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" successfully" Jul 15 11:26:52.609681 env[1217]: time="2025-07-15T11:26:52.609646903Z" level=info msg="RemovePodSandbox \"0672088194d351697d316abefaa153847511185635f08205a51c6f6e9d5ccc7a\" returns successfully" Jul 15 11:26:54.640000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.138:22-10.0.0.1:49604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:54.640986 systemd[1]: Started sshd@14-10.0.0.138:22-10.0.0.1:49604.service. Jul 15 11:26:54.641944 kernel: kauditd_printk_skb: 37 callbacks suppressed Jul 15 11:26:54.642002 kernel: audit: type=1130 audit(1752578814.640:1562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.138:22-10.0.0.1:49604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:54.692000 audit[5537]: USER_ACCT pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.693103 sshd[5537]: Accepted publickey for core from 10.0.0.1 port 49604 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:54.694444 sshd[5537]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:54.693000 audit[5537]: CRED_ACQ pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.697731 kernel: audit: type=1101 audit(1752578814.692:1563): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.697807 kernel: audit: type=1103 audit(1752578814.693:1564): pid=5537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.697829 kernel: audit: type=1006 audit(1752578814.693:1565): pid=5537 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:26:54.698068 systemd-logind[1204]: New session 15 of user core. Jul 15 11:26:54.693000 audit[5537]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd42abba0 a2=3 a3=1 items=0 ppid=1 pid=5537 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:54.698947 systemd[1]: Started session-15.scope. Jul 15 11:26:54.701539 kernel: audit: type=1300 audit(1752578814.693:1565): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd42abba0 a2=3 a3=1 items=0 ppid=1 pid=5537 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:54.701590 kernel: audit: type=1327 audit(1752578814.693:1565): proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:54.693000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:54.702000 audit[5537]: USER_START pid=5537 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.703000 audit[5539]: CRED_ACQ pid=5539 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.707757 kernel: audit: type=1105 audit(1752578814.702:1566): pid=5537 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.707790 kernel: audit: type=1103 audit(1752578814.703:1567): pid=5539 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.879578 sshd[5537]: pam_unix(sshd:session): session closed for user core Jul 15 11:26:54.879000 audit[5537]: USER_END pid=5537 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.879000 audit[5537]: CRED_DISP pid=5537 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.882191 systemd[1]: sshd@14-10.0.0.138:22-10.0.0.1:49604.service: Deactivated successfully. Jul 15 11:26:54.882935 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:26:54.883560 systemd-logind[1204]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:26:54.884150 systemd-logind[1204]: Removed session 15. Jul 15 11:26:54.885146 kernel: audit: type=1106 audit(1752578814.879:1568): pid=5537 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.885192 kernel: audit: type=1104 audit(1752578814.879:1569): pid=5537 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:54.879000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.138:22-10.0.0.1:49604 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:56.558103 kubelet[1958]: I0715 11:26:56.558042 1958 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:26:56.590000 audit[5553]: NETFILTER_CFG table=filter:127 family=2 entries=10 op=nft_register_rule pid=5553 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:56.590000 audit[5553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffed18c490 a2=0 a3=1 items=0 ppid=2109 pid=5553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:56.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:56.604000 audit[5553]: NETFILTER_CFG table=nat:128 family=2 entries=36 op=nft_register_chain pid=5553 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:26:56.604000 audit[5553]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12004 a0=3 a1=ffffed18c490 a2=0 a3=1 items=0 ppid=2109 pid=5553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:56.604000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:26:59.884647 systemd[1]: Started sshd@15-10.0.0.138:22-10.0.0.1:49616.service. Jul 15 11:26:59.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.138:22-10.0.0.1:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:59.885711 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:26:59.885757 kernel: audit: type=1130 audit(1752578819.884:1573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.138:22-10.0.0.1:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:59.932000 audit[5579]: USER_ACCT pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.933788 sshd[5579]: Accepted publickey for core from 10.0.0.1 port 49616 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:26:59.935256 sshd[5579]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:26:59.934000 audit[5579]: CRED_ACQ pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.937616 kernel: audit: type=1101 audit(1752578819.932:1574): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.937676 kernel: audit: type=1103 audit(1752578819.934:1575): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.937719 kernel: audit: type=1006 audit(1752578819.934:1576): pid=5579 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 15 11:26:59.938316 systemd-logind[1204]: New session 16 of user core. Jul 15 11:26:59.938945 kernel: audit: type=1300 audit(1752578819.934:1576): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe23d1e30 a2=3 a3=1 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:59.934000 audit[5579]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe23d1e30 a2=3 a3=1 items=0 ppid=1 pid=5579 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:59.939103 systemd[1]: Started session-16.scope. Jul 15 11:26:59.934000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:59.941899 kernel: audit: type=1327 audit(1752578819.934:1576): proctitle=737368643A20636F7265205B707269765D Jul 15 11:26:59.941000 audit[5579]: USER_START pid=5579 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.945092 kernel: audit: type=1105 audit(1752578819.941:1577): pid=5579 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.945160 kernel: audit: type=1103 audit(1752578819.941:1578): pid=5581 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:26:59.941000 audit[5581]: CRED_ACQ pid=5581 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.091122 sshd[5579]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:00.091000 audit[5579]: USER_END pid=5579 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.091000 audit[5579]: CRED_DISP pid=5579 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.094658 systemd[1]: Started sshd@16-10.0.0.138:22-10.0.0.1:49628.service. Jul 15 11:27:00.095223 systemd[1]: sshd@15-10.0.0.138:22-10.0.0.1:49616.service: Deactivated successfully. Jul 15 11:27:00.095932 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:27:00.096861 kernel: audit: type=1106 audit(1752578820.091:1579): pid=5579 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.096948 kernel: audit: type=1104 audit(1752578820.091:1580): pid=5579 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.094000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.138:22-10.0.0.1:49628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:00.094000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.138:22-10.0.0.1:49616 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:00.096588 systemd-logind[1204]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:27:00.099062 systemd-logind[1204]: Removed session 16. Jul 15 11:27:00.139000 audit[5591]: USER_ACCT pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.140319 sshd[5591]: Accepted publickey for core from 10.0.0.1 port 49628 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:00.140000 audit[5591]: CRED_ACQ pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.140000 audit[5591]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe4f08fc0 a2=3 a3=1 items=0 ppid=1 pid=5591 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:00.140000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:00.141835 sshd[5591]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:00.145462 systemd-logind[1204]: New session 17 of user core. Jul 15 11:27:00.145715 systemd[1]: Started session-17.scope. Jul 15 11:27:00.148000 audit[5591]: USER_START pid=5591 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.149000 audit[5594]: CRED_ACQ pid=5594 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.345360 sshd[5591]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:00.345000 audit[5591]: USER_END pid=5591 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.345000 audit[5591]: CRED_DISP pid=5591 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.349904 systemd[1]: Started sshd@17-10.0.0.138:22-10.0.0.1:49630.service. Jul 15 11:27:00.349000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.138:22-10.0.0.1:49630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:00.350437 systemd[1]: sshd@16-10.0.0.138:22-10.0.0.1:49628.service: Deactivated successfully. Jul 15 11:27:00.349000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.138:22-10.0.0.1:49628 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:00.351221 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:27:00.351899 systemd-logind[1204]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:27:00.352822 systemd-logind[1204]: Removed session 17. Jul 15 11:27:00.403000 audit[5603]: USER_ACCT pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.405633 sshd[5603]: Accepted publickey for core from 10.0.0.1 port 49630 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:00.405000 audit[5603]: CRED_ACQ pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.405000 audit[5603]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffed649360 a2=3 a3=1 items=0 ppid=1 pid=5603 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:00.405000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:00.406154 sshd[5603]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:00.411965 systemd-logind[1204]: New session 18 of user core. Jul 15 11:27:00.412824 systemd[1]: Started session-18.scope. Jul 15 11:27:00.417000 audit[5603]: USER_START pid=5603 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:00.418000 audit[5606]: CRED_ACQ pid=5606 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.130000 audit[5619]: NETFILTER_CFG table=filter:129 family=2 entries=22 op=nft_register_rule pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:01.130000 audit[5619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffedfd84a0 a2=0 a3=1 items=0 ppid=2109 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:01.130000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:01.137856 sshd[5603]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:01.138000 audit[5603]: USER_END pid=5603 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.138000 audit[5603]: CRED_DISP pid=5603 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.138000 audit[5619]: NETFILTER_CFG table=nat:130 family=2 entries=24 op=nft_register_rule pid=5619 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:01.138000 audit[5619]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffedfd84a0 a2=0 a3=1 items=0 ppid=2109 pid=5619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:01.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:01.141770 systemd[1]: Started sshd@18-10.0.0.138:22-10.0.0.1:49636.service. Jul 15 11:27:01.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.138:22-10.0.0.1:49636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:01.144358 systemd[1]: sshd@17-10.0.0.138:22-10.0.0.1:49630.service: Deactivated successfully. Jul 15 11:27:01.143000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.138:22-10.0.0.1:49630 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:01.145223 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:27:01.145872 systemd-logind[1204]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:27:01.146518 systemd-logind[1204]: Removed session 18. Jul 15 11:27:01.155000 audit[5624]: NETFILTER_CFG table=filter:131 family=2 entries=34 op=nft_register_rule pid=5624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:01.155000 audit[5624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=12688 a0=3 a1=ffffe4c0ba70 a2=0 a3=1 items=0 ppid=2109 pid=5624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:01.155000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:01.162000 audit[5624]: NETFILTER_CFG table=nat:132 family=2 entries=24 op=nft_register_rule pid=5624 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:01.162000 audit[5624]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=7308 a0=3 a1=ffffe4c0ba70 a2=0 a3=1 items=0 ppid=2109 pid=5624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:01.162000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:01.190000 audit[5621]: USER_ACCT pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.191353 sshd[5621]: Accepted publickey for core from 10.0.0.1 port 49636 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:01.191000 audit[5621]: CRED_ACQ pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.191000 audit[5621]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe1b2a2f0 a2=3 a3=1 items=0 ppid=1 pid=5621 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:01.191000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:01.192674 sshd[5621]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:01.195966 systemd-logind[1204]: New session 19 of user core. Jul 15 11:27:01.196823 systemd[1]: Started session-19.scope. Jul 15 11:27:01.199000 audit[5621]: USER_START pid=5621 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.200000 audit[5626]: CRED_ACQ pid=5626 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.523598 sshd[5621]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:01.523000 audit[5621]: USER_END pid=5621 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.523000 audit[5621]: CRED_DISP pid=5621 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.525808 systemd[1]: sshd@18-10.0.0.138:22-10.0.0.1:49636.service: Deactivated successfully. Jul 15 11:27:01.525000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.138:22-10.0.0.1:49636 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:01.526462 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:27:01.526984 systemd-logind[1204]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:27:01.528191 systemd[1]: Started sshd@19-10.0.0.138:22-10.0.0.1:49644.service. Jul 15 11:27:01.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.138:22-10.0.0.1:49644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:01.528942 systemd-logind[1204]: Removed session 19. Jul 15 11:27:01.577151 sshd[5636]: Accepted publickey for core from 10.0.0.1 port 49644 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:01.576000 audit[5636]: USER_ACCT pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.579098 sshd[5636]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:01.577000 audit[5636]: CRED_ACQ pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.577000 audit[5636]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffe6b772a0 a2=3 a3=1 items=0 ppid=1 pid=5636 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:01.577000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:01.583915 systemd[1]: Started session-20.scope. Jul 15 11:27:01.585084 systemd-logind[1204]: New session 20 of user core. Jul 15 11:27:01.590000 audit[5636]: USER_START pid=5636 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.591000 audit[5638]: CRED_ACQ pid=5638 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.708753 sshd[5636]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:01.708000 audit[5636]: USER_END pid=5636 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.709000 audit[5636]: CRED_DISP pid=5636 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:01.711204 systemd[1]: sshd@19-10.0.0.138:22-10.0.0.1:49644.service: Deactivated successfully. Jul 15 11:27:01.710000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.138:22-10.0.0.1:49644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:01.712047 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:27:01.712565 systemd-logind[1204]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:27:01.713201 systemd-logind[1204]: Removed session 20. Jul 15 11:27:02.550465 kubelet[1958]: E0715 11:27:02.550422 1958 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 15 11:27:06.584000 audit[5650]: NETFILTER_CFG table=filter:133 family=2 entries=22 op=nft_register_rule pid=5650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:06.585885 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 15 11:27:06.585930 kernel: audit: type=1325 audit(1752578826.584:1622): table=filter:133 family=2 entries=22 op=nft_register_rule pid=5650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:06.584000 audit[5650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc1d90b70 a2=0 a3=1 items=0 ppid=2109 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:06.589660 kernel: audit: type=1300 audit(1752578826.584:1622): arch=c00000b7 syscall=211 success=yes exit=3760 a0=3 a1=ffffc1d90b70 a2=0 a3=1 items=0 ppid=2109 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:06.589719 kernel: audit: type=1327 audit(1752578826.584:1622): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:06.584000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:06.593000 audit[5650]: NETFILTER_CFG table=nat:134 family=2 entries=108 op=nft_register_chain pid=5650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:06.593000 audit[5650]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=ffffc1d90b70 a2=0 a3=1 items=0 ppid=2109 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:06.598664 kernel: audit: type=1325 audit(1752578826.593:1623): table=nat:134 family=2 entries=108 op=nft_register_chain pid=5650 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:06.598713 kernel: audit: type=1300 audit(1752578826.593:1623): arch=c00000b7 syscall=211 success=yes exit=50220 a0=3 a1=ffffc1d90b70 a2=0 a3=1 items=0 ppid=2109 pid=5650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:06.598734 kernel: audit: type=1327 audit(1752578826.593:1623): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:06.593000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:06.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.138:22-10.0.0.1:33154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:06.713970 systemd[1]: Started sshd@20-10.0.0.138:22-10.0.0.1:33154.service. Jul 15 11:27:06.716723 kernel: audit: type=1130 audit(1752578826.713:1624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.138:22-10.0.0.1:33154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:06.756000 audit[5652]: USER_ACCT pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.757727 sshd[5652]: Accepted publickey for core from 10.0.0.1 port 33154 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:06.759133 sshd[5652]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:06.758000 audit[5652]: CRED_ACQ pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.762189 kernel: audit: type=1101 audit(1752578826.756:1625): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.762240 kernel: audit: type=1103 audit(1752578826.758:1626): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.762290 kernel: audit: type=1006 audit(1752578826.758:1627): pid=5652 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 15 11:27:06.758000 audit[5652]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd312a210 a2=3 a3=1 items=0 ppid=1 pid=5652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:06.758000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:06.763526 systemd-logind[1204]: New session 21 of user core. Jul 15 11:27:06.764063 systemd[1]: Started session-21.scope. Jul 15 11:27:06.766000 audit[5652]: USER_START pid=5652 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.767000 audit[5654]: CRED_ACQ pid=5654 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.875090 sshd[5652]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:06.875000 audit[5652]: USER_END pid=5652 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.875000 audit[5652]: CRED_DISP pid=5652 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:06.877910 systemd[1]: sshd@20-10.0.0.138:22-10.0.0.1:33154.service: Deactivated successfully. Jul 15 11:27:06.877000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.138:22-10.0.0.1:33154 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:06.878630 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:27:06.879175 systemd-logind[1204]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:27:06.879892 systemd-logind[1204]: Removed session 21. Jul 15 11:27:11.838000 audit[5707]: NETFILTER_CFG table=filter:135 family=2 entries=9 op=nft_register_rule pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:11.841135 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:27:11.841186 kernel: audit: type=1325 audit(1752578831.838:1633): table=filter:135 family=2 entries=9 op=nft_register_rule pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:11.841212 kernel: audit: type=1300 audit(1752578831.838:1633): arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffea140df0 a2=0 a3=1 items=0 ppid=2109 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:11.838000 audit[5707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=3016 a0=3 a1=ffffea140df0 a2=0 a3=1 items=0 ppid=2109 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:11.843884 kernel: audit: type=1327 audit(1752578831.838:1633): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:11.838000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:11.851000 audit[5707]: NETFILTER_CFG table=nat:136 family=2 entries=55 op=nft_register_chain pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:11.851000 audit[5707]: SYSCALL arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=ffffea140df0 a2=0 a3=1 items=0 ppid=2109 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:11.856129 kernel: audit: type=1325 audit(1752578831.851:1634): table=nat:136 family=2 entries=55 op=nft_register_chain pid=5707 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:27:11.856172 kernel: audit: type=1300 audit(1752578831.851:1634): arch=c00000b7 syscall=211 success=yes exit=20100 a0=3 a1=ffffea140df0 a2=0 a3=1 items=0 ppid=2109 pid=5707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:11.856190 kernel: audit: type=1327 audit(1752578831.851:1634): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:11.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:27:11.879660 systemd[1]: Started sshd@21-10.0.0.138:22-10.0.0.1:33164.service. Jul 15 11:27:11.879000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.138:22-10.0.0.1:33164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:11.882710 kernel: audit: type=1130 audit(1752578831.879:1635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.138:22-10.0.0.1:33164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:11.929000 audit[5709]: USER_ACCT pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:11.930246 sshd[5709]: Accepted publickey for core from 10.0.0.1 port 33164 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:11.931598 sshd[5709]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:11.930000 audit[5709]: CRED_ACQ pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:11.934883 kernel: audit: type=1101 audit(1752578831.929:1636): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:11.934994 kernel: audit: type=1103 audit(1752578831.930:1637): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:11.936574 kernel: audit: type=1006 audit(1752578831.930:1638): pid=5709 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 15 11:27:11.930000 audit[5709]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffc4de6670 a2=3 a3=1 items=0 ppid=1 pid=5709 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:11.930000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:11.938745 systemd-logind[1204]: New session 22 of user core. Jul 15 11:27:11.939221 systemd[1]: Started session-22.scope. Jul 15 11:27:11.942000 audit[5709]: USER_START pid=5709 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:11.943000 audit[5711]: CRED_ACQ pid=5711 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:12.083974 sshd[5709]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:12.084000 audit[5709]: USER_END pid=5709 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:12.084000 audit[5709]: CRED_DISP pid=5709 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:12.086578 systemd[1]: sshd@21-10.0.0.138:22-10.0.0.1:33164.service: Deactivated successfully. Jul 15 11:27:12.086000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.138:22-10.0.0.1:33164 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:12.087349 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:27:12.087877 systemd-logind[1204]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:27:12.088597 systemd-logind[1204]: Removed session 22. Jul 15 11:27:17.088913 systemd[1]: Started sshd@22-10.0.0.138:22-10.0.0.1:38266.service. Jul 15 11:27:17.087000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.138:22-10.0.0.1:38266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:17.089832 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:27:17.089899 kernel: audit: type=1130 audit(1752578837.087:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.138:22-10.0.0.1:38266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:27:17.133000 audit[5730]: USER_ACCT pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.135068 sshd[5730]: Accepted publickey for core from 10.0.0.1 port 38266 ssh2: RSA SHA256:j1wDR6gweCSngZuaE8kL1fszhDF+Tuwb03sE4/bYQBA Jul 15 11:27:17.136528 sshd[5730]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:27:17.134000 audit[5730]: CRED_ACQ pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.139415 kernel: audit: type=1101 audit(1752578837.133:1645): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.139456 kernel: audit: type=1103 audit(1752578837.134:1646): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.139473 kernel: audit: type=1006 audit(1752578837.134:1647): pid=5730 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:27:17.134000 audit[5730]: SYSCALL arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd09b2560 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.142545 systemd-logind[1204]: New session 23 of user core. Jul 15 11:27:17.142991 systemd[1]: Started session-23.scope. Jul 15 11:27:17.143112 kernel: audit: type=1300 audit(1752578837.134:1647): arch=c00000b7 syscall=64 success=yes exit=3 a0=5 a1=ffffd09b2560 a2=3 a3=1 items=0 ppid=1 pid=5730 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:27:17.143146 kernel: audit: type=1327 audit(1752578837.134:1647): proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:17.134000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:27:17.145000 audit[5730]: USER_START pid=5730 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.146000 audit[5732]: CRED_ACQ pid=5732 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.151665 kernel: audit: type=1105 audit(1752578837.145:1648): pid=5730 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.151704 kernel: audit: type=1103 audit(1752578837.146:1649): pid=5732 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.258891 sshd[5730]: pam_unix(sshd:session): session closed for user core Jul 15 11:27:17.258000 audit[5730]: USER_END pid=5730 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.261481 systemd-logind[1204]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:27:17.261684 systemd[1]: sshd@22-10.0.0.138:22-10.0.0.1:38266.service: Deactivated successfully. Jul 15 11:27:17.258000 audit[5730]: CRED_DISP pid=5730 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.262600 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:27:17.263355 systemd-logind[1204]: Removed session 23. Jul 15 11:27:17.264411 kernel: audit: type=1106 audit(1752578837.258:1650): pid=5730 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.264479 kernel: audit: type=1104 audit(1752578837.258:1651): pid=5730 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 15 11:27:17.260000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.138:22-10.0.0.1:38266 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'