Jul 14 22:46:07.834468 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 14 20:42:36 -00 2025 Jul 14 22:46:07.834487 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 22:46:07.834495 kernel: BIOS-provided physical RAM map: Jul 14 22:46:07.834500 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009fbff] usable Jul 14 22:46:07.834506 kernel: BIOS-e820: [mem 0x000000000009fc00-0x000000000009ffff] reserved Jul 14 22:46:07.834511 kernel: BIOS-e820: [mem 0x00000000000f0000-0x00000000000fffff] reserved Jul 14 22:46:07.834518 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000009cfdbfff] usable Jul 14 22:46:07.834524 kernel: BIOS-e820: [mem 0x000000009cfdc000-0x000000009cffffff] reserved Jul 14 22:46:07.834530 kernel: BIOS-e820: [mem 0x00000000b0000000-0x00000000bfffffff] reserved Jul 14 22:46:07.834536 kernel: BIOS-e820: [mem 0x00000000fed1c000-0x00000000fed1ffff] reserved Jul 14 22:46:07.834541 kernel: BIOS-e820: [mem 0x00000000feffc000-0x00000000feffffff] reserved Jul 14 22:46:07.834546 kernel: BIOS-e820: [mem 0x00000000fffc0000-0x00000000ffffffff] reserved Jul 14 22:46:07.834552 kernel: BIOS-e820: [mem 0x000000fd00000000-0x000000ffffffffff] reserved Jul 14 22:46:07.834557 kernel: NX (Execute Disable) protection: active Jul 14 22:46:07.834565 kernel: SMBIOS 2.8 present. Jul 14 22:46:07.834572 kernel: DMI: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Jul 14 22:46:07.834577 kernel: Hypervisor detected: KVM Jul 14 22:46:07.834583 kernel: kvm-clock: Using msrs 4b564d01 and 4b564d00 Jul 14 22:46:07.834589 kernel: kvm-clock: cpu 0, msr 5a19b001, primary cpu clock Jul 14 22:46:07.834595 kernel: kvm-clock: using sched offset of 2372836592 cycles Jul 14 22:46:07.834601 kernel: clocksource: kvm-clock: mask: 0xffffffffffffffff max_cycles: 0x1cd42e4dffb, max_idle_ns: 881590591483 ns Jul 14 22:46:07.834607 kernel: tsc: Detected 2794.750 MHz processor Jul 14 22:46:07.834614 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 14 22:46:07.834621 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 14 22:46:07.834627 kernel: last_pfn = 0x9cfdc max_arch_pfn = 0x400000000 Jul 14 22:46:07.834651 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 14 22:46:07.834657 kernel: Using GB pages for direct mapping Jul 14 22:46:07.834674 kernel: ACPI: Early table checksum verification disabled Jul 14 22:46:07.834680 kernel: ACPI: RSDP 0x00000000000F59D0 000014 (v00 BOCHS ) Jul 14 22:46:07.834686 kernel: ACPI: RSDT 0x000000009CFE241A 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834693 kernel: ACPI: FACP 0x000000009CFE21FA 0000F4 (v03 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834699 kernel: ACPI: DSDT 0x000000009CFE0040 0021BA (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834706 kernel: ACPI: FACS 0x000000009CFE0000 000040 Jul 14 22:46:07.834712 kernel: ACPI: APIC 0x000000009CFE22EE 000090 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834718 kernel: ACPI: HPET 0x000000009CFE237E 000038 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834724 kernel: ACPI: MCFG 0x000000009CFE23B6 00003C (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834730 kernel: ACPI: WAET 0x000000009CFE23F2 000028 (v01 BOCHS BXPC 00000001 BXPC 00000001) Jul 14 22:46:07.834736 kernel: ACPI: Reserving FACP table memory at [mem 0x9cfe21fa-0x9cfe22ed] Jul 14 22:46:07.834742 kernel: ACPI: Reserving DSDT table memory at [mem 0x9cfe0040-0x9cfe21f9] Jul 14 22:46:07.834749 kernel: ACPI: Reserving FACS table memory at [mem 0x9cfe0000-0x9cfe003f] Jul 14 22:46:07.834758 kernel: ACPI: Reserving APIC table memory at [mem 0x9cfe22ee-0x9cfe237d] Jul 14 22:46:07.834764 kernel: ACPI: Reserving HPET table memory at [mem 0x9cfe237e-0x9cfe23b5] Jul 14 22:46:07.834771 kernel: ACPI: Reserving MCFG table memory at [mem 0x9cfe23b6-0x9cfe23f1] Jul 14 22:46:07.834777 kernel: ACPI: Reserving WAET table memory at [mem 0x9cfe23f2-0x9cfe2419] Jul 14 22:46:07.834784 kernel: No NUMA configuration found Jul 14 22:46:07.834790 kernel: Faking a node at [mem 0x0000000000000000-0x000000009cfdbfff] Jul 14 22:46:07.834798 kernel: NODE_DATA(0) allocated [mem 0x9cfd6000-0x9cfdbfff] Jul 14 22:46:07.834805 kernel: Zone ranges: Jul 14 22:46:07.834811 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 14 22:46:07.834818 kernel: DMA32 [mem 0x0000000001000000-0x000000009cfdbfff] Jul 14 22:46:07.834824 kernel: Normal empty Jul 14 22:46:07.834839 kernel: Movable zone start for each node Jul 14 22:46:07.834847 kernel: Early memory node ranges Jul 14 22:46:07.834855 kernel: node 0: [mem 0x0000000000001000-0x000000000009efff] Jul 14 22:46:07.834862 kernel: node 0: [mem 0x0000000000100000-0x000000009cfdbfff] Jul 14 22:46:07.834870 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000009cfdbfff] Jul 14 22:46:07.834876 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 14 22:46:07.834883 kernel: On node 0, zone DMA: 97 pages in unavailable ranges Jul 14 22:46:07.834889 kernel: On node 0, zone DMA32: 12324 pages in unavailable ranges Jul 14 22:46:07.834896 kernel: ACPI: PM-Timer IO Port: 0x608 Jul 14 22:46:07.834902 kernel: ACPI: LAPIC_NMI (acpi_id[0xff] dfl dfl lint[0x1]) Jul 14 22:46:07.834908 kernel: IOAPIC[0]: apic_id 0, version 17, address 0xfec00000, GSI 0-23 Jul 14 22:46:07.834915 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) Jul 14 22:46:07.834921 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 5 global_irq 5 high level) Jul 14 22:46:07.834928 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) Jul 14 22:46:07.834935 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 10 global_irq 10 high level) Jul 14 22:46:07.834942 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 11 global_irq 11 high level) Jul 14 22:46:07.834948 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 14 22:46:07.834954 kernel: ACPI: HPET id: 0x8086a201 base: 0xfed00000 Jul 14 22:46:07.834961 kernel: TSC deadline timer available Jul 14 22:46:07.834967 kernel: smpboot: Allowing 4 CPUs, 0 hotplug CPUs Jul 14 22:46:07.834973 kernel: kvm-guest: KVM setup pv remote TLB flush Jul 14 22:46:07.834980 kernel: kvm-guest: setup PV sched yield Jul 14 22:46:07.834986 kernel: [mem 0xc0000000-0xfed1bfff] available for PCI devices Jul 14 22:46:07.834994 kernel: Booting paravirtualized kernel on KVM Jul 14 22:46:07.835000 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 14 22:46:07.835007 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:4 nr_node_ids:1 Jul 14 22:46:07.835013 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u524288 Jul 14 22:46:07.835020 kernel: pcpu-alloc: s188696 r8192 d32488 u524288 alloc=1*2097152 Jul 14 22:46:07.835026 kernel: pcpu-alloc: [0] 0 1 2 3 Jul 14 22:46:07.835032 kernel: kvm-guest: setup async PF for cpu 0 Jul 14 22:46:07.835039 kernel: kvm-guest: stealtime: cpu 0, msr 9a41c0c0 Jul 14 22:46:07.835045 kernel: kvm-guest: PV spinlocks enabled Jul 14 22:46:07.835053 kernel: PV qspinlock hash table entries: 256 (order: 0, 4096 bytes, linear) Jul 14 22:46:07.835059 kernel: Built 1 zonelists, mobility grouping on. Total pages: 632732 Jul 14 22:46:07.835065 kernel: Policy zone: DMA32 Jul 14 22:46:07.835073 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 22:46:07.835080 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 22:46:07.835086 kernel: Dentry cache hash table entries: 524288 (order: 10, 4194304 bytes, linear) Jul 14 22:46:07.835093 kernel: Inode-cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 22:46:07.835100 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 22:46:07.835108 kernel: Memory: 2436696K/2571752K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 134796K reserved, 0K cma-reserved) Jul 14 22:46:07.835114 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=4, Nodes=1 Jul 14 22:46:07.835121 kernel: ftrace: allocating 34607 entries in 136 pages Jul 14 22:46:07.835127 kernel: ftrace: allocated 136 pages with 2 groups Jul 14 22:46:07.835133 kernel: rcu: Hierarchical RCU implementation. Jul 14 22:46:07.835140 kernel: rcu: RCU event tracing is enabled. Jul 14 22:46:07.835147 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=4. Jul 14 22:46:07.835154 kernel: Rude variant of Tasks RCU enabled. Jul 14 22:46:07.835160 kernel: Tracing variant of Tasks RCU enabled. Jul 14 22:46:07.835168 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 22:46:07.835174 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=4 Jul 14 22:46:07.835181 kernel: NR_IRQS: 33024, nr_irqs: 456, preallocated irqs: 16 Jul 14 22:46:07.835187 kernel: random: crng init done Jul 14 22:46:07.835193 kernel: Console: colour VGA+ 80x25 Jul 14 22:46:07.835200 kernel: printk: console [ttyS0] enabled Jul 14 22:46:07.835206 kernel: ACPI: Core revision 20210730 Jul 14 22:46:07.835213 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 19112604467 ns Jul 14 22:46:07.835219 kernel: APIC: Switch to symmetric I/O mode setup Jul 14 22:46:07.835227 kernel: x2apic enabled Jul 14 22:46:07.835233 kernel: Switched APIC routing to physical x2apic. Jul 14 22:46:07.835240 kernel: kvm-guest: setup PV IPIs Jul 14 22:46:07.835246 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 14 22:46:07.835253 kernel: tsc: Marking TSC unstable due to TSCs unsynchronized Jul 14 22:46:07.835259 kernel: Calibrating delay loop (skipped) preset value.. 5589.50 BogoMIPS (lpj=2794750) Jul 14 22:46:07.835266 kernel: x86/cpu: User Mode Instruction Prevention (UMIP) activated Jul 14 22:46:07.835274 kernel: Last level iTLB entries: 4KB 512, 2MB 255, 4MB 127 Jul 14 22:46:07.835281 kernel: Last level dTLB entries: 4KB 512, 2MB 255, 4MB 127, 1GB 0 Jul 14 22:46:07.835294 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 14 22:46:07.835302 kernel: Spectre V2 : Mitigation: Retpolines Jul 14 22:46:07.835310 kernel: Spectre V2 : Spectre v2 / SpectreRSB: Filling RSB on context switch and VMEXIT Jul 14 22:46:07.835319 kernel: Spectre V2 : Enabling Speculation Barrier for firmware calls Jul 14 22:46:07.835327 kernel: RETBleed: Mitigation: untrained return thunk Jul 14 22:46:07.835334 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 14 22:46:07.835341 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 14 22:46:07.835348 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 14 22:46:07.835355 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 14 22:46:07.835363 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 14 22:46:07.835370 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 14 22:46:07.835377 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'standard' format. Jul 14 22:46:07.835384 kernel: Freeing SMP alternatives memory: 32K Jul 14 22:46:07.835390 kernel: pid_max: default: 32768 minimum: 301 Jul 14 22:46:07.835397 kernel: LSM: Security Framework initializing Jul 14 22:46:07.835404 kernel: SELinux: Initializing. Jul 14 22:46:07.835411 kernel: Mount-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 22:46:07.835419 kernel: Mountpoint-cache hash table entries: 8192 (order: 4, 65536 bytes, linear) Jul 14 22:46:07.835426 kernel: smpboot: CPU0: AMD EPYC 7402P 24-Core Processor (family: 0x17, model: 0x31, stepping: 0x0) Jul 14 22:46:07.835433 kernel: Performance Events: Fam17h+ core perfctr, AMD PMU driver. Jul 14 22:46:07.835440 kernel: ... version: 0 Jul 14 22:46:07.835447 kernel: ... bit width: 48 Jul 14 22:46:07.835453 kernel: ... generic registers: 6 Jul 14 22:46:07.835460 kernel: ... value mask: 0000ffffffffffff Jul 14 22:46:07.835467 kernel: ... max period: 00007fffffffffff Jul 14 22:46:07.835474 kernel: ... fixed-purpose events: 0 Jul 14 22:46:07.835482 kernel: ... event mask: 000000000000003f Jul 14 22:46:07.835504 kernel: signal: max sigframe size: 1776 Jul 14 22:46:07.835519 kernel: rcu: Hierarchical SRCU implementation. Jul 14 22:46:07.835538 kernel: smp: Bringing up secondary CPUs ... Jul 14 22:46:07.835549 kernel: x86: Booting SMP configuration: Jul 14 22:46:07.835555 kernel: .... node #0, CPUs: #1 Jul 14 22:46:07.835562 kernel: kvm-clock: cpu 1, msr 5a19b041, secondary cpu clock Jul 14 22:46:07.835569 kernel: kvm-guest: setup async PF for cpu 1 Jul 14 22:46:07.835576 kernel: kvm-guest: stealtime: cpu 1, msr 9a49c0c0 Jul 14 22:46:07.835584 kernel: #2 Jul 14 22:46:07.835591 kernel: kvm-clock: cpu 2, msr 5a19b081, secondary cpu clock Jul 14 22:46:07.835598 kernel: kvm-guest: setup async PF for cpu 2 Jul 14 22:46:07.835605 kernel: kvm-guest: stealtime: cpu 2, msr 9a51c0c0 Jul 14 22:46:07.835612 kernel: #3 Jul 14 22:46:07.835619 kernel: kvm-clock: cpu 3, msr 5a19b0c1, secondary cpu clock Jul 14 22:46:07.835625 kernel: kvm-guest: setup async PF for cpu 3 Jul 14 22:46:07.835644 kernel: kvm-guest: stealtime: cpu 3, msr 9a59c0c0 Jul 14 22:46:07.835651 kernel: smp: Brought up 1 node, 4 CPUs Jul 14 22:46:07.835659 kernel: smpboot: Max logical packages: 1 Jul 14 22:46:07.835666 kernel: smpboot: Total of 4 processors activated (22358.00 BogoMIPS) Jul 14 22:46:07.835673 kernel: devtmpfs: initialized Jul 14 22:46:07.835680 kernel: x86/mm: Memory block size: 128MB Jul 14 22:46:07.835687 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 22:46:07.835693 kernel: futex hash table entries: 1024 (order: 4, 65536 bytes, linear) Jul 14 22:46:07.835700 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 22:46:07.835707 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 22:46:07.835714 kernel: audit: initializing netlink subsys (disabled) Jul 14 22:46:07.835722 kernel: audit: type=2000 audit(1752533167.479:1): state=initialized audit_enabled=0 res=1 Jul 14 22:46:07.835734 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 22:46:07.835741 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 14 22:46:07.835747 kernel: cpuidle: using governor menu Jul 14 22:46:07.835754 kernel: ACPI: bus type PCI registered Jul 14 22:46:07.835761 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 22:46:07.835768 kernel: dca service started, version 1.12.1 Jul 14 22:46:07.835775 kernel: PCI: MMCONFIG for domain 0000 [bus 00-ff] at [mem 0xb0000000-0xbfffffff] (base 0xb0000000) Jul 14 22:46:07.835782 kernel: PCI: MMCONFIG at [mem 0xb0000000-0xbfffffff] reserved in E820 Jul 14 22:46:07.835790 kernel: PCI: Using configuration type 1 for base access Jul 14 22:46:07.835797 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 14 22:46:07.835804 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 22:46:07.835811 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 22:46:07.835818 kernel: ACPI: Added _OSI(Module Device) Jul 14 22:46:07.835825 kernel: ACPI: Added _OSI(Processor Device) Jul 14 22:46:07.835838 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 22:46:07.835845 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 22:46:07.835852 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 22:46:07.835860 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 22:46:07.835867 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 22:46:07.835874 kernel: ACPI: Interpreter enabled Jul 14 22:46:07.835881 kernel: ACPI: PM: (supports S0 S3 S5) Jul 14 22:46:07.835888 kernel: ACPI: Using IOAPIC for interrupt routing Jul 14 22:46:07.835895 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 14 22:46:07.835902 kernel: ACPI: Enabled 2 GPEs in block 00 to 3F Jul 14 22:46:07.835908 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) Jul 14 22:46:07.836019 kernel: acpi PNP0A08:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 22:46:07.836092 kernel: acpi PNP0A08:00: _OSC: platform does not support [PCIeHotplug LTR] Jul 14 22:46:07.836160 kernel: acpi PNP0A08:00: _OSC: OS now controls [PME AER PCIeCapability] Jul 14 22:46:07.836169 kernel: PCI host bridge to bus 0000:00 Jul 14 22:46:07.836247 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 14 22:46:07.836310 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xffff window] Jul 14 22:46:07.836371 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 14 22:46:07.836432 kernel: pci_bus 0000:00: root bus resource [mem 0x9d000000-0xafffffff window] Jul 14 22:46:07.836491 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 14 22:46:07.836551 kernel: pci_bus 0000:00: root bus resource [mem 0x100000000-0x8ffffffff window] Jul 14 22:46:07.836610 kernel: pci_bus 0000:00: root bus resource [bus 00-ff] Jul 14 22:46:07.836705 kernel: pci 0000:00:00.0: [8086:29c0] type 00 class 0x060000 Jul 14 22:46:07.836782 kernel: pci 0000:00:01.0: [1234:1111] type 00 class 0x030000 Jul 14 22:46:07.836860 kernel: pci 0000:00:01.0: reg 0x10: [mem 0xfd000000-0xfdffffff pref] Jul 14 22:46:07.836932 kernel: pci 0000:00:01.0: reg 0x18: [mem 0xfebd0000-0xfebd0fff] Jul 14 22:46:07.836999 kernel: pci 0000:00:01.0: reg 0x30: [mem 0xfebc0000-0xfebcffff pref] Jul 14 22:46:07.837066 kernel: pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 14 22:46:07.837146 kernel: pci 0000:00:02.0: [1af4:1005] type 00 class 0x00ff00 Jul 14 22:46:07.837216 kernel: pci 0000:00:02.0: reg 0x10: [io 0xc0c0-0xc0df] Jul 14 22:46:07.837287 kernel: pci 0000:00:02.0: reg 0x14: [mem 0xfebd1000-0xfebd1fff] Jul 14 22:46:07.837355 kernel: pci 0000:00:02.0: reg 0x20: [mem 0xfe000000-0xfe003fff 64bit pref] Jul 14 22:46:07.837436 kernel: pci 0000:00:03.0: [1af4:1001] type 00 class 0x010000 Jul 14 22:46:07.837503 kernel: pci 0000:00:03.0: reg 0x10: [io 0xc000-0xc07f] Jul 14 22:46:07.837593 kernel: pci 0000:00:03.0: reg 0x14: [mem 0xfebd2000-0xfebd2fff] Jul 14 22:46:07.837677 kernel: pci 0000:00:03.0: reg 0x20: [mem 0xfe004000-0xfe007fff 64bit pref] Jul 14 22:46:07.837752 kernel: pci 0000:00:04.0: [1af4:1000] type 00 class 0x020000 Jul 14 22:46:07.837828 kernel: pci 0000:00:04.0: reg 0x10: [io 0xc0e0-0xc0ff] Jul 14 22:46:07.837909 kernel: pci 0000:00:04.0: reg 0x14: [mem 0xfebd3000-0xfebd3fff] Jul 14 22:46:07.837975 kernel: pci 0000:00:04.0: reg 0x20: [mem 0xfe008000-0xfe00bfff 64bit pref] Jul 14 22:46:07.838046 kernel: pci 0000:00:04.0: reg 0x30: [mem 0xfeb80000-0xfebbffff pref] Jul 14 22:46:07.838125 kernel: pci 0000:00:1f.0: [8086:2918] type 00 class 0x060100 Jul 14 22:46:07.838208 kernel: pci 0000:00:1f.0: quirk: [io 0x0600-0x067f] claimed by ICH6 ACPI/GPIO/TCO Jul 14 22:46:07.838293 kernel: pci 0000:00:1f.2: [8086:2922] type 00 class 0x010601 Jul 14 22:46:07.838361 kernel: pci 0000:00:1f.2: reg 0x20: [io 0xc100-0xc11f] Jul 14 22:46:07.838430 kernel: pci 0000:00:1f.2: reg 0x24: [mem 0xfebd4000-0xfebd4fff] Jul 14 22:46:07.838502 kernel: pci 0000:00:1f.3: [8086:2930] type 00 class 0x0c0500 Jul 14 22:46:07.838569 kernel: pci 0000:00:1f.3: reg 0x20: [io 0x0700-0x073f] Jul 14 22:46:07.838578 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 10 Jul 14 22:46:07.838585 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 10 Jul 14 22:46:07.838592 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 14 22:46:07.838599 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 11 Jul 14 22:46:07.838606 kernel: ACPI: PCI: Interrupt link LNKE configured for IRQ 10 Jul 14 22:46:07.838615 kernel: ACPI: PCI: Interrupt link LNKF configured for IRQ 10 Jul 14 22:46:07.838622 kernel: ACPI: PCI: Interrupt link LNKG configured for IRQ 11 Jul 14 22:46:07.838640 kernel: ACPI: PCI: Interrupt link LNKH configured for IRQ 11 Jul 14 22:46:07.838647 kernel: ACPI: PCI: Interrupt link GSIA configured for IRQ 16 Jul 14 22:46:07.838654 kernel: ACPI: PCI: Interrupt link GSIB configured for IRQ 17 Jul 14 22:46:07.838661 kernel: ACPI: PCI: Interrupt link GSIC configured for IRQ 18 Jul 14 22:46:07.838668 kernel: ACPI: PCI: Interrupt link GSID configured for IRQ 19 Jul 14 22:46:07.838675 kernel: ACPI: PCI: Interrupt link GSIE configured for IRQ 20 Jul 14 22:46:07.838682 kernel: ACPI: PCI: Interrupt link GSIF configured for IRQ 21 Jul 14 22:46:07.838690 kernel: ACPI: PCI: Interrupt link GSIG configured for IRQ 22 Jul 14 22:46:07.838697 kernel: ACPI: PCI: Interrupt link GSIH configured for IRQ 23 Jul 14 22:46:07.838704 kernel: iommu: Default domain type: Translated Jul 14 22:46:07.838711 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 14 22:46:07.838781 kernel: pci 0000:00:01.0: vgaarb: setting as boot VGA device Jul 14 22:46:07.838861 kernel: pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 14 22:46:07.838932 kernel: pci 0000:00:01.0: vgaarb: bridge control possible Jul 14 22:46:07.838942 kernel: vgaarb: loaded Jul 14 22:46:07.838949 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 22:46:07.838959 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 22:46:07.838966 kernel: PTP clock support registered Jul 14 22:46:07.838972 kernel: PCI: Using ACPI for IRQ routing Jul 14 22:46:07.838979 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 14 22:46:07.838986 kernel: e820: reserve RAM buffer [mem 0x0009fc00-0x0009ffff] Jul 14 22:46:07.838993 kernel: e820: reserve RAM buffer [mem 0x9cfdc000-0x9fffffff] Jul 14 22:46:07.839000 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0 Jul 14 22:46:07.839006 kernel: hpet0: 3 comparators, 64-bit 100.000000 MHz counter Jul 14 22:46:07.839013 kernel: clocksource: Switched to clocksource kvm-clock Jul 14 22:46:07.839021 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 22:46:07.839028 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 22:46:07.839035 kernel: pnp: PnP ACPI init Jul 14 22:46:07.839119 kernel: system 00:05: [mem 0xb0000000-0xbfffffff window] has been reserved Jul 14 22:46:07.839132 kernel: pnp: PnP ACPI: found 6 devices Jul 14 22:46:07.839141 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 14 22:46:07.839149 kernel: NET: Registered PF_INET protocol family Jul 14 22:46:07.839158 kernel: IP idents hash table entries: 65536 (order: 7, 524288 bytes, linear) Jul 14 22:46:07.839168 kernel: tcp_listen_portaddr_hash hash table entries: 2048 (order: 3, 32768 bytes, linear) Jul 14 22:46:07.839177 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 22:46:07.839186 kernel: TCP established hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 22:46:07.839194 kernel: TCP bind hash table entries: 32768 (order: 7, 524288 bytes, linear) Jul 14 22:46:07.839203 kernel: TCP: Hash tables configured (established 32768 bind 32768) Jul 14 22:46:07.839211 kernel: UDP hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 22:46:07.839220 kernel: UDP-Lite hash table entries: 2048 (order: 4, 65536 bytes, linear) Jul 14 22:46:07.839229 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 22:46:07.839238 kernel: NET: Registered PF_XDP protocol family Jul 14 22:46:07.839308 kernel: pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7 window] Jul 14 22:46:07.839368 kernel: pci_bus 0000:00: resource 5 [io 0x0d00-0xffff window] Jul 14 22:46:07.839426 kernel: pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff window] Jul 14 22:46:07.839484 kernel: pci_bus 0000:00: resource 7 [mem 0x9d000000-0xafffffff window] Jul 14 22:46:07.839543 kernel: pci_bus 0000:00: resource 8 [mem 0xc0000000-0xfebfffff window] Jul 14 22:46:07.839603 kernel: pci_bus 0000:00: resource 9 [mem 0x100000000-0x8ffffffff window] Jul 14 22:46:07.839612 kernel: PCI: CLS 0 bytes, default 64 Jul 14 22:46:07.839619 kernel: Initialise system trusted keyrings Jul 14 22:46:07.839639 kernel: workingset: timestamp_bits=39 max_order=20 bucket_order=0 Jul 14 22:46:07.839647 kernel: Key type asymmetric registered Jul 14 22:46:07.839653 kernel: Asymmetric key parser 'x509' registered Jul 14 22:46:07.839660 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 22:46:07.839667 kernel: io scheduler mq-deadline registered Jul 14 22:46:07.839674 kernel: io scheduler kyber registered Jul 14 22:46:07.839681 kernel: io scheduler bfq registered Jul 14 22:46:07.839688 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 14 22:46:07.839695 kernel: ACPI: \_SB_.GSIG: Enabled at IRQ 22 Jul 14 22:46:07.839704 kernel: ACPI: \_SB_.GSIH: Enabled at IRQ 23 Jul 14 22:46:07.839711 kernel: ACPI: \_SB_.GSIE: Enabled at IRQ 20 Jul 14 22:46:07.839718 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 22:46:07.839725 kernel: 00:03: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 14 22:46:07.839732 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBD,PNP0f13:MOU] at 0x60,0x64 irq 1,12 Jul 14 22:46:07.839738 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 14 22:46:07.839745 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 14 22:46:07.839820 kernel: rtc_cmos 00:04: RTC can wake from S4 Jul 14 22:46:07.839841 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 14 22:46:07.839905 kernel: rtc_cmos 00:04: registered as rtc0 Jul 14 22:46:07.839967 kernel: rtc_cmos 00:04: setting system clock to 2025-07-14T22:46:07 UTC (1752533167) Jul 14 22:46:07.840028 kernel: rtc_cmos 00:04: alarms up to one day, y3k, 242 bytes nvram, hpet irqs Jul 14 22:46:07.840037 kernel: NET: Registered PF_INET6 protocol family Jul 14 22:46:07.840044 kernel: Segment Routing with IPv6 Jul 14 22:46:07.840051 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 22:46:07.840057 kernel: NET: Registered PF_PACKET protocol family Jul 14 22:46:07.840064 kernel: Key type dns_resolver registered Jul 14 22:46:07.840073 kernel: IPI shorthand broadcast: enabled Jul 14 22:46:07.840080 kernel: sched_clock: Marking stable (385040354, 98525499)->(528763212, -45197359) Jul 14 22:46:07.840087 kernel: registered taskstats version 1 Jul 14 22:46:07.840093 kernel: Loading compiled-in X.509 certificates Jul 14 22:46:07.840101 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 14a6940dcbc00bab0c83ae71c4abeb315720716d' Jul 14 22:46:07.840107 kernel: Key type .fscrypt registered Jul 14 22:46:07.840114 kernel: Key type fscrypt-provisioning registered Jul 14 22:46:07.840121 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 22:46:07.840129 kernel: ima: Allocated hash algorithm: sha1 Jul 14 22:46:07.840136 kernel: ima: No architecture policies found Jul 14 22:46:07.840143 kernel: clk: Disabling unused clocks Jul 14 22:46:07.840149 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 14 22:46:07.840156 kernel: Write protecting the kernel read-only data: 28672k Jul 14 22:46:07.840163 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 14 22:46:07.840170 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 14 22:46:07.840177 kernel: Run /init as init process Jul 14 22:46:07.840183 kernel: with arguments: Jul 14 22:46:07.840190 kernel: /init Jul 14 22:46:07.840198 kernel: with environment: Jul 14 22:46:07.840205 kernel: HOME=/ Jul 14 22:46:07.840211 kernel: TERM=linux Jul 14 22:46:07.840218 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 22:46:07.840227 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 22:46:07.840236 systemd[1]: Detected virtualization kvm. Jul 14 22:46:07.840244 systemd[1]: Detected architecture x86-64. Jul 14 22:46:07.840252 systemd[1]: Running in initrd. Jul 14 22:46:07.840259 systemd[1]: No hostname configured, using default hostname. Jul 14 22:46:07.840266 systemd[1]: Hostname set to . Jul 14 22:46:07.840274 systemd[1]: Initializing machine ID from VM UUID. Jul 14 22:46:07.840281 systemd[1]: Queued start job for default target initrd.target. Jul 14 22:46:07.840288 systemd[1]: Started systemd-ask-password-console.path. Jul 14 22:46:07.840295 systemd[1]: Reached target cryptsetup.target. Jul 14 22:46:07.840302 systemd[1]: Reached target paths.target. Jul 14 22:46:07.840309 systemd[1]: Reached target slices.target. Jul 14 22:46:07.840318 systemd[1]: Reached target swap.target. Jul 14 22:46:07.840330 systemd[1]: Reached target timers.target. Jul 14 22:46:07.840339 systemd[1]: Listening on iscsid.socket. Jul 14 22:46:07.840347 systemd[1]: Listening on iscsiuio.socket. Jul 14 22:46:07.840354 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 22:46:07.840363 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 22:46:07.840370 systemd[1]: Listening on systemd-journald.socket. Jul 14 22:46:07.840377 systemd[1]: Listening on systemd-networkd.socket. Jul 14 22:46:07.840385 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 22:46:07.840392 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 22:46:07.840400 systemd[1]: Reached target sockets.target. Jul 14 22:46:07.840407 systemd[1]: Starting kmod-static-nodes.service... Jul 14 22:46:07.840415 systemd[1]: Finished network-cleanup.service. Jul 14 22:46:07.840422 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 22:46:07.840431 systemd[1]: Starting systemd-journald.service... Jul 14 22:46:07.840438 systemd[1]: Starting systemd-modules-load.service... Jul 14 22:46:07.840446 systemd[1]: Starting systemd-resolved.service... Jul 14 22:46:07.840453 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 22:46:07.840461 systemd[1]: Finished kmod-static-nodes.service. Jul 14 22:46:07.840470 systemd-journald[198]: Journal started Jul 14 22:46:07.840511 systemd-journald[198]: Runtime Journal (/run/log/journal/d0e7a0edb2334a98acec25f0b2d29642) is 6.0M, max 48.5M, 42.5M free. Jul 14 22:46:07.833317 systemd-modules-load[199]: Inserted module 'overlay' Jul 14 22:46:07.866915 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 22:46:07.866938 kernel: Bridge firewalling registered Jul 14 22:46:07.866954 kernel: audit: type=1130 audit(1752533167.866:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.866000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.850388 systemd-resolved[200]: Positive Trust Anchors: Jul 14 22:46:07.871078 systemd[1]: Started systemd-journald.service. Jul 14 22:46:07.850398 systemd-resolved[200]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 22:46:07.850424 systemd-resolved[200]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 22:46:07.881068 kernel: audit: type=1130 audit(1752533167.872:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.872000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.852568 systemd-resolved[200]: Defaulting to hostname 'linux'. Jul 14 22:46:07.882000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.866867 systemd-modules-load[199]: Inserted module 'br_netfilter' Jul 14 22:46:07.881073 systemd[1]: Started systemd-resolved.service. Jul 14 22:46:07.883884 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 22:46:07.885789 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 22:46:07.895733 kernel: audit: type=1130 audit(1752533167.882:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.895753 kernel: audit: type=1130 audit(1752533167.884:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.895762 kernel: audit: type=1130 audit(1752533167.885:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.884000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.886169 systemd[1]: Reached target nss-lookup.target. Jul 14 22:46:07.895849 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 22:46:07.896540 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 22:46:07.900725 kernel: SCSI subsystem initialized Jul 14 22:46:07.901938 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 22:46:07.906496 kernel: audit: type=1130 audit(1752533167.901:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.901000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.911033 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 22:46:07.917733 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 22:46:07.917749 kernel: device-mapper: uevent: version 1.0.3 Jul 14 22:46:07.917757 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 22:46:07.917766 kernel: audit: type=1130 audit(1752533167.912:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.912000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.914199 systemd[1]: Starting dracut-cmdline.service... Jul 14 22:46:07.917702 systemd-modules-load[199]: Inserted module 'dm_multipath' Jul 14 22:46:07.923784 kernel: audit: type=1130 audit(1752533167.918:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.918000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.918211 systemd[1]: Finished systemd-modules-load.service. Jul 14 22:46:07.924762 dracut-cmdline[217]: dracut-dracut-053 Jul 14 22:46:07.920083 systemd[1]: Starting systemd-sysctl.service... Jul 14 22:46:07.926408 dracut-cmdline[217]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200 flatcar.first_boot=detected verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 22:46:07.931230 systemd[1]: Finished systemd-sysctl.service. Jul 14 22:46:07.931000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.935661 kernel: audit: type=1130 audit(1752533167.931:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:07.982654 kernel: Loading iSCSI transport class v2.0-870. Jul 14 22:46:07.998664 kernel: iscsi: registered transport (tcp) Jul 14 22:46:08.019670 kernel: iscsi: registered transport (qla4xxx) Jul 14 22:46:08.019686 kernel: QLogic iSCSI HBA Driver Jul 14 22:46:08.048072 systemd[1]: Finished dracut-cmdline.service. Jul 14 22:46:08.048000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:08.049593 systemd[1]: Starting dracut-pre-udev.service... Jul 14 22:46:08.094663 kernel: raid6: avx2x4 gen() 30928 MB/s Jul 14 22:46:08.111655 kernel: raid6: avx2x4 xor() 8523 MB/s Jul 14 22:46:08.128659 kernel: raid6: avx2x2 gen() 32686 MB/s Jul 14 22:46:08.145655 kernel: raid6: avx2x2 xor() 19201 MB/s Jul 14 22:46:08.162652 kernel: raid6: avx2x1 gen() 26567 MB/s Jul 14 22:46:08.179655 kernel: raid6: avx2x1 xor() 15238 MB/s Jul 14 22:46:08.196654 kernel: raid6: sse2x4 gen() 14551 MB/s Jul 14 22:46:08.213657 kernel: raid6: sse2x4 xor() 7598 MB/s Jul 14 22:46:08.230656 kernel: raid6: sse2x2 gen() 16442 MB/s Jul 14 22:46:08.247657 kernel: raid6: sse2x2 xor() 9810 MB/s Jul 14 22:46:08.264660 kernel: raid6: sse2x1 gen() 12398 MB/s Jul 14 22:46:08.281982 kernel: raid6: sse2x1 xor() 7792 MB/s Jul 14 22:46:08.281997 kernel: raid6: using algorithm avx2x2 gen() 32686 MB/s Jul 14 22:46:08.282006 kernel: raid6: .... xor() 19201 MB/s, rmw enabled Jul 14 22:46:08.282663 kernel: raid6: using avx2x2 recovery algorithm Jul 14 22:46:08.294652 kernel: xor: automatically using best checksumming function avx Jul 14 22:46:08.384664 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 14 22:46:08.392156 systemd[1]: Finished dracut-pre-udev.service. Jul 14 22:46:08.392000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:08.393000 audit: BPF prog-id=7 op=LOAD Jul 14 22:46:08.393000 audit: BPF prog-id=8 op=LOAD Jul 14 22:46:08.394163 systemd[1]: Starting systemd-udevd.service... Jul 14 22:46:08.405567 systemd-udevd[401]: Using default interface naming scheme 'v252'. Jul 14 22:46:08.409258 systemd[1]: Started systemd-udevd.service. Jul 14 22:46:08.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:08.409975 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 22:46:08.419758 dracut-pre-trigger[405]: rd.md=0: removing MD RAID activation Jul 14 22:46:08.444184 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 22:46:08.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:08.444949 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 22:46:08.476697 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 22:46:08.476000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:08.502864 kernel: virtio_blk virtio1: [vda] 19775488 512-byte logical blocks (10.1 GB/9.43 GiB) Jul 14 22:46:08.508248 kernel: GPT:Primary header thinks Alt. header is not at the end of the disk. Jul 14 22:46:08.508261 kernel: GPT:9289727 != 19775487 Jul 14 22:46:08.508269 kernel: GPT:Alternate GPT header not at the end of the disk. Jul 14 22:46:08.508278 kernel: GPT:9289727 != 19775487 Jul 14 22:46:08.508287 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 14 22:46:08.508296 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:46:08.512656 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 22:46:08.517651 kernel: libata version 3.00 loaded. Jul 14 22:46:08.523750 kernel: AVX2 version of gcm_enc/dec engaged. Jul 14 22:46:08.523772 kernel: AES CTR mode by8 optimization enabled Jul 14 22:46:08.525647 kernel: ahci 0000:00:1f.2: version 3.0 Jul 14 22:46:08.537319 kernel: ACPI: \_SB_.GSIA: Enabled at IRQ 16 Jul 14 22:46:08.537337 kernel: ahci 0000:00:1f.2: AHCI 0001.0000 32 slots 6 ports 1.5 Gbps 0x3f impl SATA mode Jul 14 22:46:08.537428 kernel: ahci 0000:00:1f.2: flags: 64bit ncq only Jul 14 22:46:08.537506 kernel: scsi host0: ahci Jul 14 22:46:08.537593 kernel: scsi host1: ahci Jul 14 22:46:08.537699 kernel: scsi host2: ahci Jul 14 22:46:08.537778 kernel: scsi host3: ahci Jul 14 22:46:08.537885 kernel: scsi host4: ahci Jul 14 22:46:08.537963 kernel: scsi host5: ahci Jul 14 22:46:08.538042 kernel: ata1: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4100 irq 34 Jul 14 22:46:08.538052 kernel: ata2: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4180 irq 34 Jul 14 22:46:08.538061 kernel: ata3: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4200 irq 34 Jul 14 22:46:08.538070 kernel: ata4: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4280 irq 34 Jul 14 22:46:08.538079 kernel: ata5: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4300 irq 34 Jul 14 22:46:08.538087 kernel: ata6: SATA max UDMA/133 abar m4096@0xfebd4000 port 0xfebd4380 irq 34 Jul 14 22:46:08.545653 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/vda6 scanned by (udev-worker) (459) Jul 14 22:46:08.548579 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 22:46:08.577466 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 22:46:08.583651 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 22:46:08.591231 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 22:46:08.595103 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 22:46:08.595819 systemd[1]: Starting disk-uuid.service... Jul 14 22:46:08.607518 disk-uuid[529]: Primary Header is updated. Jul 14 22:46:08.607518 disk-uuid[529]: Secondary Entries is updated. Jul 14 22:46:08.607518 disk-uuid[529]: Secondary Header is updated. Jul 14 22:46:08.611659 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:46:08.614655 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:46:08.845045 kernel: ata3: SATA link up 1.5 Gbps (SStatus 113 SControl 300) Jul 14 22:46:08.845078 kernel: ata5: SATA link down (SStatus 0 SControl 300) Jul 14 22:46:08.845088 kernel: ata4: SATA link down (SStatus 0 SControl 300) Jul 14 22:46:08.845961 kernel: ata2: SATA link down (SStatus 0 SControl 300) Jul 14 22:46:08.846021 kernel: ata6: SATA link down (SStatus 0 SControl 300) Jul 14 22:46:08.847656 kernel: ata1: SATA link down (SStatus 0 SControl 300) Jul 14 22:46:08.849083 kernel: ata3.00: ATAPI: QEMU DVD-ROM, 2.5+, max UDMA/100 Jul 14 22:46:08.849139 kernel: ata3.00: applying bridge limits Jul 14 22:46:08.849149 kernel: ata3.00: configured for UDMA/100 Jul 14 22:46:08.850650 kernel: scsi 2:0:0:0: CD-ROM QEMU QEMU DVD-ROM 2.5+ PQ: 0 ANSI: 5 Jul 14 22:46:08.882662 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 4x/4x cd/rw xa/form2 tray Jul 14 22:46:08.899161 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 14 22:46:08.899177 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 14 22:46:09.615571 disk-uuid[530]: The operation has completed successfully. Jul 14 22:46:09.616827 kernel: vda: vda1 vda2 vda3 vda4 vda6 vda7 vda9 Jul 14 22:46:09.637142 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 22:46:09.636000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.636000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.637226 systemd[1]: Finished disk-uuid.service. Jul 14 22:46:09.641055 systemd[1]: Starting verity-setup.service... Jul 14 22:46:09.652663 kernel: device-mapper: verity: sha256 using implementation "sha256-ni" Jul 14 22:46:09.671190 systemd[1]: Found device dev-mapper-usr.device. Jul 14 22:46:09.672360 systemd[1]: Mounting sysusr-usr.mount... Jul 14 22:46:09.675388 systemd[1]: Finished verity-setup.service. Jul 14 22:46:09.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.731235 systemd[1]: Mounted sysusr-usr.mount. Jul 14 22:46:09.732647 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 22:46:09.732069 systemd[1]: afterburn-network-kargs.service was skipped because no trigger condition checks were met. Jul 14 22:46:09.732713 systemd[1]: Starting ignition-setup.service... Jul 14 22:46:09.735333 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 22:46:09.741047 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 22:46:09.741072 kernel: BTRFS info (device vda6): using free space tree Jul 14 22:46:09.741082 kernel: BTRFS info (device vda6): has skinny extents Jul 14 22:46:09.748571 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 22:46:09.755562 systemd[1]: Finished ignition-setup.service. Jul 14 22:46:09.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.756992 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 22:46:09.792691 ignition[642]: Ignition 2.14.0 Jul 14 22:46:09.793037 ignition[642]: Stage: fetch-offline Jul 14 22:46:09.793076 ignition[642]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:46:09.793083 ignition[642]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:46:09.793169 ignition[642]: parsed url from cmdline: "" Jul 14 22:46:09.793349 ignition[642]: no config URL provided Jul 14 22:46:09.793357 ignition[642]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 22:46:09.793366 ignition[642]: no config at "/usr/lib/ignition/user.ign" Jul 14 22:46:09.793382 ignition[642]: op(1): [started] loading QEMU firmware config module Jul 14 22:46:09.793388 ignition[642]: op(1): executing: "modprobe" "qemu_fw_cfg" Jul 14 22:46:09.800259 ignition[642]: op(1): [finished] loading QEMU firmware config module Jul 14 22:46:09.807169 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 22:46:09.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.808000 audit: BPF prog-id=9 op=LOAD Jul 14 22:46:09.809422 systemd[1]: Starting systemd-networkd.service... Jul 14 22:46:09.839854 ignition[642]: parsing config with SHA512: 222f5acf50f1dc51f5216518ef50b7512caec9646a1604f463402346adb36ff45387fa0204449d5e284ff1d1d0bfedd5960898bd3e783d64e6dc97d1d915479e Jul 14 22:46:09.846607 unknown[642]: fetched base config from "system" Jul 14 22:46:09.847555 unknown[642]: fetched user config from "qemu" Jul 14 22:46:09.848645 ignition[642]: fetch-offline: fetch-offline passed Jul 14 22:46:09.849429 ignition[642]: Ignition finished successfully Jul 14 22:46:09.851085 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 22:46:09.850000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.859589 systemd-networkd[727]: lo: Link UP Jul 14 22:46:09.859598 systemd-networkd[727]: lo: Gained carrier Jul 14 22:46:09.859989 systemd-networkd[727]: Enumeration completed Jul 14 22:46:09.860177 systemd-networkd[727]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 22:46:09.861182 systemd-networkd[727]: eth0: Link UP Jul 14 22:46:09.861185 systemd-networkd[727]: eth0: Gained carrier Jul 14 22:46:09.861353 systemd[1]: Started systemd-networkd.service. Jul 14 22:46:09.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.865941 systemd[1]: Reached target network.target. Jul 14 22:46:09.867383 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 22:46:09.869621 systemd[1]: Starting ignition-kargs.service... Jul 14 22:46:09.871654 systemd[1]: Starting iscsiuio.service... Jul 14 22:46:09.875619 systemd[1]: Started iscsiuio.service. Jul 14 22:46:09.875000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.875885 systemd-networkd[727]: eth0: DHCPv4 address 10.0.0.3/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 22:46:09.878377 ignition[729]: Ignition 2.14.0 Jul 14 22:46:09.878383 ignition[729]: Stage: kargs Jul 14 22:46:09.878461 ignition[729]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:46:09.879945 systemd[1]: Starting iscsid.service... Jul 14 22:46:09.878469 ignition[729]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:46:09.883862 iscsid[738]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 22:46:09.883862 iscsid[738]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log Jul 14 22:46:09.883862 iscsid[738]: into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 22:46:09.883862 iscsid[738]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 22:46:09.883862 iscsid[738]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 22:46:09.883862 iscsid[738]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 22:46:09.883862 iscsid[738]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 22:46:09.885000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.883851 systemd[1]: Finished ignition-kargs.service. Jul 14 22:46:09.879527 ignition[729]: kargs: kargs passed Jul 14 22:46:09.891017 systemd[1]: Started iscsid.service. Jul 14 22:46:09.879560 ignition[729]: Ignition finished successfully Jul 14 22:46:09.897000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.898654 systemd[1]: Starting dracut-initqueue.service... Jul 14 22:46:09.900701 systemd[1]: Starting ignition-disks.service... Jul 14 22:46:09.907169 ignition[740]: Ignition 2.14.0 Jul 14 22:46:09.907361 ignition[740]: Stage: disks Jul 14 22:46:09.907990 systemd[1]: Finished dracut-initqueue.service. Jul 14 22:46:09.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.907448 ignition[740]: no configs at "/usr/lib/ignition/base.d" Jul 14 22:46:09.909529 systemd[1]: Finished ignition-disks.service. Jul 14 22:46:09.907456 ignition[740]: no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:46:09.910942 systemd[1]: Reached target initrd-root-device.target. Jul 14 22:46:09.908345 ignition[740]: disks: disks passed Jul 14 22:46:09.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.912609 systemd[1]: Reached target local-fs-pre.target. Jul 14 22:46:09.908378 ignition[740]: Ignition finished successfully Jul 14 22:46:09.912675 systemd[1]: Reached target local-fs.target. Jul 14 22:46:09.912847 systemd[1]: Reached target remote-fs-pre.target. Jul 14 22:46:09.913005 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 22:46:09.913165 systemd[1]: Reached target remote-fs.target. Jul 14 22:46:09.913329 systemd[1]: Reached target sysinit.target. Jul 14 22:46:09.913488 systemd[1]: Reached target basic.target. Jul 14 22:46:09.914583 systemd[1]: Starting dracut-pre-mount.service... Jul 14 22:46:09.921287 systemd[1]: Finished dracut-pre-mount.service. Jul 14 22:46:09.922835 systemd[1]: Starting systemd-fsck-root.service... Jul 14 22:46:09.934874 systemd-fsck[760]: ROOT: clean, 619/553520 files, 56023/553472 blocks Jul 14 22:46:09.939924 systemd[1]: Finished systemd-fsck-root.service. Jul 14 22:46:09.940000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:09.941602 systemd[1]: Mounting sysroot.mount... Jul 14 22:46:09.949656 kernel: EXT4-fs (vda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 22:46:09.949759 systemd[1]: Mounted sysroot.mount. Jul 14 22:46:09.949873 systemd[1]: Reached target initrd-root-fs.target. Jul 14 22:46:09.952729 systemd[1]: Mounting sysroot-usr.mount... Jul 14 22:46:09.954220 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 22:46:09.954264 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 22:46:09.954285 systemd[1]: Reached target ignition-diskful.target. Jul 14 22:46:09.960341 systemd[1]: Mounted sysroot-usr.mount. Jul 14 22:46:09.961706 systemd[1]: Starting initrd-setup-root.service... Jul 14 22:46:09.967098 initrd-setup-root[770]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 22:46:09.971053 initrd-setup-root[778]: cut: /sysroot/etc/group: No such file or directory Jul 14 22:46:09.974829 initrd-setup-root[786]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 22:46:09.978375 initrd-setup-root[794]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 22:46:10.004062 systemd[1]: Finished initrd-setup-root.service. Jul 14 22:46:10.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:10.004919 systemd[1]: Starting ignition-mount.service... Jul 14 22:46:10.006829 systemd[1]: Starting sysroot-boot.service... Jul 14 22:46:10.009366 bash[811]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 22:46:10.016956 ignition[812]: INFO : Ignition 2.14.0 Jul 14 22:46:10.016956 ignition[812]: INFO : Stage: mount Jul 14 22:46:10.019158 ignition[812]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:46:10.019158 ignition[812]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:46:10.019158 ignition[812]: INFO : mount: mount passed Jul 14 22:46:10.019158 ignition[812]: INFO : Ignition finished successfully Jul 14 22:46:10.020000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:10.019269 systemd[1]: Finished ignition-mount.service. Jul 14 22:46:10.024888 systemd[1]: Finished sysroot-boot.service. Jul 14 22:46:10.024000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:10.681347 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 22:46:10.689397 kernel: BTRFS: device label OEM devid 1 transid 10 /dev/vda6 scanned by mount (822) Jul 14 22:46:10.689423 kernel: BTRFS info (device vda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 22:46:10.689432 kernel: BTRFS info (device vda6): using free space tree Jul 14 22:46:10.690893 kernel: BTRFS info (device vda6): has skinny extents Jul 14 22:46:10.693660 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 22:46:10.694274 systemd[1]: Starting ignition-files.service... Jul 14 22:46:10.706892 ignition[842]: INFO : Ignition 2.14.0 Jul 14 22:46:10.706892 ignition[842]: INFO : Stage: files Jul 14 22:46:10.708586 ignition[842]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:46:10.708586 ignition[842]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:46:10.708586 ignition[842]: DEBUG : files: compiled without relabeling support, skipping Jul 14 22:46:10.712228 ignition[842]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 22:46:10.712228 ignition[842]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 22:46:10.712228 ignition[842]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 22:46:10.712228 ignition[842]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 22:46:10.712228 ignition[842]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 22:46:10.712228 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 14 22:46:10.711736 unknown[842]: wrote ssh authorized keys file for user: core Jul 14 22:46:10.721801 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.0-linux-amd64.tar.gz: attempt #1 Jul 14 22:46:10.900820 systemd-networkd[727]: eth0: Gained IPv6LL Jul 14 22:46:15.809609 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 22:46:16.084931 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.0-linux-amd64.tar.gz" Jul 14 22:46:16.084931 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 22:46:16.088600 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 22:46:16.088600 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 22:46:16.091822 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 22:46:16.093402 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 22:46:16.095055 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 22:46:16.096664 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 22:46:16.098309 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 22:46:16.100025 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 22:46:16.101710 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 22:46:16.103349 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 22:46:16.105660 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 22:46:16.105660 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 22:46:16.109900 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET https://extensions.flatcar.org/extensions/kubernetes-v1.32.4-x86-64.raw: attempt #1 Jul 14 22:46:17.079504 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): GET result: OK Jul 14 22:46:17.516845 ignition[842]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.32.4-x86-64.raw" Jul 14 22:46:17.516845 ignition[842]: INFO : files: op(b): [started] processing unit "prepare-helm.service" Jul 14 22:46:17.520172 ignition[842]: INFO : files: op(b): op(c): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 22:46:17.521973 ignition[842]: INFO : files: op(b): op(c): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 22:46:17.521973 ignition[842]: INFO : files: op(b): [finished] processing unit "prepare-helm.service" Jul 14 22:46:17.521973 ignition[842]: INFO : files: op(d): [started] processing unit "coreos-metadata.service" Jul 14 22:46:17.526011 ignition[842]: INFO : files: op(d): op(e): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 22:46:17.527804 ignition[842]: INFO : files: op(d): op(e): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 22:46:17.527804 ignition[842]: INFO : files: op(d): [finished] processing unit "coreos-metadata.service" Jul 14 22:46:17.527804 ignition[842]: INFO : files: op(f): [started] setting preset to enabled for "prepare-helm.service" Jul 14 22:46:17.532039 ignition[842]: INFO : files: op(f): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 22:46:17.532039 ignition[842]: INFO : files: op(10): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 22:46:17.534692 ignition[842]: INFO : files: op(10): op(11): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 22:46:17.553516 ignition[842]: INFO : files: op(10): op(11): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 22:46:17.555047 ignition[842]: INFO : files: op(10): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 22:46:17.555047 ignition[842]: INFO : files: createResultFile: createFiles: op(12): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 22:46:17.555047 ignition[842]: INFO : files: createResultFile: createFiles: op(12): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 22:46:17.555047 ignition[842]: INFO : files: files passed Jul 14 22:46:17.555047 ignition[842]: INFO : Ignition finished successfully Jul 14 22:46:17.561802 systemd[1]: Finished ignition-files.service. Jul 14 22:46:17.567001 kernel: kauditd_printk_skb: 25 callbacks suppressed Jul 14 22:46:17.567021 kernel: audit: type=1130 audit(1752533177.562:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.562000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.563379 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 22:46:17.567818 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 22:46:17.568279 systemd[1]: Starting ignition-quench.service... Jul 14 22:46:17.577982 kernel: audit: type=1130 audit(1752533177.571:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.577997 kernel: audit: type=1131 audit(1752533177.571:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.571000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.571000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.578064 initrd-setup-root-after-ignition[865]: grep: /sysroot/usr/share/oem/oem-release: No such file or directory Jul 14 22:46:17.583144 kernel: audit: type=1130 audit(1752533177.578:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.578000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.570126 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 22:46:17.584826 initrd-setup-root-after-ignition[869]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 22:46:17.570188 systemd[1]: Finished ignition-quench.service. Jul 14 22:46:17.573586 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 22:46:17.578957 systemd[1]: Reached target ignition-complete.target. Jul 14 22:46:17.584876 systemd[1]: Starting initrd-parse-etc.service... Jul 14 22:46:17.601241 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 22:46:17.601311 systemd[1]: Finished initrd-parse-etc.service. Jul 14 22:46:17.609069 kernel: audit: type=1130 audit(1752533177.602:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.609084 kernel: audit: type=1131 audit(1752533177.602:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.602000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.602000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.603035 systemd[1]: Reached target initrd-fs.target. Jul 14 22:46:17.609822 systemd[1]: Reached target initrd.target. Jul 14 22:46:17.611216 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 22:46:17.611890 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 22:46:17.623302 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 22:46:17.627451 kernel: audit: type=1130 audit(1752533177.622:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.622000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.627545 systemd[1]: Starting initrd-cleanup.service... Jul 14 22:46:17.635967 systemd[1]: Stopped target nss-lookup.target. Jul 14 22:46:17.637473 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 22:46:17.637602 systemd[1]: Stopped target timers.target. Jul 14 22:46:17.639789 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 22:46:17.644717 kernel: audit: type=1131 audit(1752533177.639:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.639000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.639869 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 22:46:17.640525 systemd[1]: Stopped target initrd.target. Jul 14 22:46:17.645417 systemd[1]: Stopped target basic.target. Jul 14 22:46:17.646181 systemd[1]: Stopped target ignition-complete.target. Jul 14 22:46:17.648251 systemd[1]: Stopped target ignition-diskful.target. Jul 14 22:46:17.648951 systemd[1]: Stopped target initrd-root-device.target. Jul 14 22:46:17.651249 systemd[1]: Stopped target remote-fs.target. Jul 14 22:46:17.652060 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 22:46:17.653507 systemd[1]: Stopped target sysinit.target. Jul 14 22:46:17.654914 systemd[1]: Stopped target local-fs.target. Jul 14 22:46:17.656992 systemd[1]: Stopped target local-fs-pre.target. Jul 14 22:46:17.657877 systemd[1]: Stopped target swap.target. Jul 14 22:46:17.664441 kernel: audit: type=1131 audit(1752533177.659:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.659000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.659730 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 22:46:17.659809 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 22:46:17.670199 kernel: audit: type=1131 audit(1752533177.665:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.665000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.660562 systemd[1]: Stopped target cryptsetup.target. Jul 14 22:46:17.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.665243 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 22:46:17.665320 systemd[1]: Stopped dracut-initqueue.service. Jul 14 22:46:17.666228 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 22:46:17.666305 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 22:46:17.671126 systemd[1]: Stopped target paths.target. Jul 14 22:46:17.672465 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 22:46:17.675762 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 22:46:17.679064 systemd[1]: Stopped target slices.target. Jul 14 22:46:17.680559 systemd[1]: Stopped target sockets.target. Jul 14 22:46:17.682090 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 22:46:17.683224 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 22:46:17.684000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.685150 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 22:46:17.686084 systemd[1]: Stopped ignition-files.service. Jul 14 22:46:17.686000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.688292 systemd[1]: Stopping ignition-mount.service... Jul 14 22:46:17.689855 systemd[1]: Stopping iscsid.service... Jul 14 22:46:17.691094 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 22:46:17.692000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.693138 iscsid[738]: iscsid shutting down. Jul 14 22:46:17.691189 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 22:46:17.696000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.698000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.698279 ignition[882]: INFO : Ignition 2.14.0 Jul 14 22:46:17.698279 ignition[882]: INFO : Stage: umount Jul 14 22:46:17.698279 ignition[882]: INFO : no configs at "/usr/lib/ignition/base.d" Jul 14 22:46:17.698279 ignition[882]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/qemu" Jul 14 22:46:17.698279 ignition[882]: INFO : umount: umount passed Jul 14 22:46:17.698279 ignition[882]: INFO : Ignition finished successfully Jul 14 22:46:17.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.693124 systemd[1]: Stopping sysroot-boot.service... Jul 14 22:46:17.707000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.693943 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 22:46:17.694082 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 22:46:17.712000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.696792 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 22:46:17.696878 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 22:46:17.713000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.713000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.699607 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 22:46:17.699722 systemd[1]: Stopped iscsid.service. Jul 14 22:46:17.701022 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 22:46:17.701087 systemd[1]: Stopped ignition-mount.service. Jul 14 22:46:17.722000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.702761 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 22:46:17.702827 systemd[1]: Closed iscsid.socket. Jul 14 22:46:17.726000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.704313 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 22:46:17.728000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.704342 systemd[1]: Stopped ignition-disks.service. Jul 14 22:46:17.730000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.705814 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 22:46:17.705842 systemd[1]: Stopped ignition-kargs.service. Jul 14 22:46:17.707722 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 22:46:17.707760 systemd[1]: Stopped ignition-setup.service. Jul 14 22:46:17.733000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.708584 systemd[1]: Stopping iscsiuio.service... Jul 14 22:46:17.710798 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 22:46:17.737000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.711149 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 22:46:17.737000 audit: BPF prog-id=6 op=UNLOAD Jul 14 22:46:17.711216 systemd[1]: Stopped iscsiuio.service. Jul 14 22:46:17.712894 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 22:46:17.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.712957 systemd[1]: Finished initrd-cleanup.service. Jul 14 22:46:17.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.743000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.744000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.715204 systemd[1]: Stopped target network.target. Jul 14 22:46:17.716208 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 22:46:17.716235 systemd[1]: Closed iscsiuio.socket. Jul 14 22:46:17.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.717015 systemd[1]: Stopping systemd-networkd.service... Jul 14 22:46:17.718451 systemd[1]: Stopping systemd-resolved.service... Jul 14 22:46:17.719159 systemd-networkd[727]: eth0: DHCPv6 lease lost Jul 14 22:46:17.752000 audit: BPF prog-id=9 op=UNLOAD Jul 14 22:46:17.720411 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 22:46:17.720480 systemd[1]: Stopped systemd-networkd.service. Jul 14 22:46:17.722803 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 22:46:17.722863 systemd[1]: Closed systemd-networkd.socket. Jul 14 22:46:17.724439 systemd[1]: Stopping network-cleanup.service... Jul 14 22:46:17.725359 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 22:46:17.725402 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 22:46:17.726918 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 22:46:17.726952 systemd[1]: Stopped systemd-sysctl.service. Jul 14 22:46:17.728745 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 22:46:17.728776 systemd[1]: Stopped systemd-modules-load.service. Jul 14 22:46:17.730479 systemd[1]: Stopping systemd-udevd.service... Jul 14 22:46:17.732967 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 22:46:17.733361 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 22:46:17.733441 systemd[1]: Stopped systemd-resolved.service. Jul 14 22:46:17.735803 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 22:46:17.735905 systemd[1]: Stopped systemd-udevd.service. Jul 14 22:46:17.768000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.738389 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 22:46:17.769000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:17.738423 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 22:46:17.739938 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 22:46:17.739964 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 22:46:17.741446 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 22:46:17.741480 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 22:46:17.743175 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 22:46:17.743205 systemd[1]: Stopped dracut-cmdline.service. Jul 14 22:46:17.743282 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 22:46:17.743308 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 22:46:17.744033 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 22:46:17.744238 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 22:46:17.744277 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 22:46:17.744628 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 22:46:17.744712 systemd[1]: Stopped network-cleanup.service. Jul 14 22:46:17.748808 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 22:46:17.748867 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 22:46:17.767709 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 22:46:17.767784 systemd[1]: Stopped sysroot-boot.service. Jul 14 22:46:17.769015 systemd[1]: Reached target initrd-switch-root.target. Jul 14 22:46:17.770494 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 22:46:17.770537 systemd[1]: Stopped initrd-setup-root.service. Jul 14 22:46:17.771144 systemd[1]: Starting initrd-switch-root.service... Jul 14 22:46:17.786421 systemd[1]: Switching root. Jul 14 22:46:17.805193 systemd-journald[198]: Journal stopped Jul 14 22:46:20.418156 systemd-journald[198]: Received SIGTERM from PID 1 (systemd). Jul 14 22:46:20.418192 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 22:46:20.418208 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 22:46:20.418218 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 22:46:20.418230 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 22:46:20.418241 kernel: SELinux: policy capability open_perms=1 Jul 14 22:46:20.418250 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 22:46:20.418261 kernel: SELinux: policy capability always_check_network=0 Jul 14 22:46:20.418272 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 22:46:20.418281 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 22:46:20.418290 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 22:46:20.418300 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 22:46:20.418310 systemd[1]: Successfully loaded SELinux policy in 37.476ms. Jul 14 22:46:20.418324 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.337ms. Jul 14 22:46:20.418335 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 22:46:20.418347 systemd[1]: Detected virtualization kvm. Jul 14 22:46:20.418356 systemd[1]: Detected architecture x86-64. Jul 14 22:46:20.418367 systemd[1]: Detected first boot. Jul 14 22:46:20.418377 systemd[1]: Initializing machine ID from VM UUID. Jul 14 22:46:20.418387 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 22:46:20.418396 systemd[1]: Populated /etc with preset unit settings. Jul 14 22:46:20.418407 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:46:20.418417 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:46:20.418439 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:46:20.418452 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 22:46:20.418462 systemd[1]: Stopped initrd-switch-root.service. Jul 14 22:46:20.418472 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 22:46:20.418483 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 22:46:20.418494 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 22:46:20.418504 systemd[1]: Created slice system-getty.slice. Jul 14 22:46:20.418514 systemd[1]: Created slice system-modprobe.slice. Jul 14 22:46:20.418524 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 22:46:20.418534 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 22:46:20.418544 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 22:46:20.418554 systemd[1]: Created slice user.slice. Jul 14 22:46:20.418564 systemd[1]: Started systemd-ask-password-console.path. Jul 14 22:46:20.418574 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 22:46:20.418587 systemd[1]: Set up automount boot.automount. Jul 14 22:46:20.418596 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 22:46:20.418607 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 22:46:20.418617 systemd[1]: Stopped target initrd-fs.target. Jul 14 22:46:20.418627 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 22:46:20.418648 systemd[1]: Reached target integritysetup.target. Jul 14 22:46:20.418658 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 22:46:20.418668 systemd[1]: Reached target remote-fs.target. Jul 14 22:46:20.418679 systemd[1]: Reached target slices.target. Jul 14 22:46:20.418689 systemd[1]: Reached target swap.target. Jul 14 22:46:20.418699 systemd[1]: Reached target torcx.target. Jul 14 22:46:20.418709 systemd[1]: Reached target veritysetup.target. Jul 14 22:46:20.418719 systemd[1]: Listening on systemd-coredump.socket. Jul 14 22:46:20.418729 systemd[1]: Listening on systemd-initctl.socket. Jul 14 22:46:20.418739 systemd[1]: Listening on systemd-networkd.socket. Jul 14 22:46:20.418749 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 22:46:20.418759 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 22:46:20.418770 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 22:46:20.418780 systemd[1]: Mounting dev-hugepages.mount... Jul 14 22:46:20.418790 systemd[1]: Mounting dev-mqueue.mount... Jul 14 22:46:20.418800 systemd[1]: Mounting media.mount... Jul 14 22:46:20.418810 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:20.418820 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 22:46:20.418830 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 22:46:20.418840 systemd[1]: Mounting tmp.mount... Jul 14 22:46:20.418850 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 22:46:20.418862 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:46:20.418872 systemd[1]: Starting kmod-static-nodes.service... Jul 14 22:46:20.418882 systemd[1]: Starting modprobe@configfs.service... Jul 14 22:46:20.418891 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:46:20.418901 systemd[1]: Starting modprobe@drm.service... Jul 14 22:46:20.418911 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:46:20.418921 systemd[1]: Starting modprobe@fuse.service... Jul 14 22:46:20.418931 systemd[1]: Starting modprobe@loop.service... Jul 14 22:46:20.418942 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 22:46:20.418953 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 22:46:20.418963 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 22:46:20.418974 kernel: loop: module loaded Jul 14 22:46:20.418983 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 22:46:20.418993 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 22:46:20.419003 systemd[1]: Stopped systemd-journald.service. Jul 14 22:46:20.419013 kernel: fuse: init (API version 7.34) Jul 14 22:46:20.419022 systemd[1]: Starting systemd-journald.service... Jul 14 22:46:20.419032 systemd[1]: Starting systemd-modules-load.service... Jul 14 22:46:20.419043 systemd[1]: Starting systemd-network-generator.service... Jul 14 22:46:20.419053 systemd[1]: Starting systemd-remount-fs.service... Jul 14 22:46:20.419063 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 22:46:20.419073 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 22:46:20.419085 systemd-journald[1004]: Journal started Jul 14 22:46:20.419119 systemd-journald[1004]: Runtime Journal (/run/log/journal/d0e7a0edb2334a98acec25f0b2d29642) is 6.0M, max 48.5M, 42.5M free. Jul 14 22:46:17.861000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 22:46:18.264000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 22:46:18.264000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 22:46:18.265000 audit: BPF prog-id=10 op=LOAD Jul 14 22:46:18.265000 audit: BPF prog-id=10 op=UNLOAD Jul 14 22:46:18.265000 audit: BPF prog-id=11 op=LOAD Jul 14 22:46:18.265000 audit: BPF prog-id=11 op=UNLOAD Jul 14 22:46:18.297000 audit[915]: AVC avc: denied { associate } for pid=915 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 22:46:18.297000 audit[915]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001058d2 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=898 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:18.297000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 22:46:18.299000 audit[915]: AVC avc: denied { associate } for pid=915 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 22:46:18.299000 audit[915]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001059a9 a2=1ed a3=0 items=2 ppid=898 pid=915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:18.299000 audit: CWD cwd="/" Jul 14 22:46:18.299000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:18.299000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:18.299000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 22:46:20.299000 audit: BPF prog-id=12 op=LOAD Jul 14 22:46:20.299000 audit: BPF prog-id=3 op=UNLOAD Jul 14 22:46:20.299000 audit: BPF prog-id=13 op=LOAD Jul 14 22:46:20.299000 audit: BPF prog-id=14 op=LOAD Jul 14 22:46:20.299000 audit: BPF prog-id=4 op=UNLOAD Jul 14 22:46:20.299000 audit: BPF prog-id=5 op=UNLOAD Jul 14 22:46:20.300000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.303000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.315000 audit: BPF prog-id=12 op=UNLOAD Jul 14 22:46:20.399000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.402000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.404000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.404000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.405000 audit: BPF prog-id=15 op=LOAD Jul 14 22:46:20.405000 audit: BPF prog-id=16 op=LOAD Jul 14 22:46:20.405000 audit: BPF prog-id=17 op=LOAD Jul 14 22:46:20.405000 audit: BPF prog-id=13 op=UNLOAD Jul 14 22:46:20.405000 audit: BPF prog-id=14 op=UNLOAD Jul 14 22:46:20.416000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 22:46:20.416000 audit[1004]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=4 a1=7ffd66b53620 a2=4000 a3=7ffd66b536bc items=0 ppid=1 pid=1004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:20.416000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 22:46:18.296211 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:46:20.298604 systemd[1]: Queued start job for default target multi-user.target. Jul 14 22:46:18.296440 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 22:46:20.298614 systemd[1]: Unnecessary job was removed for dev-vda6.device. Jul 14 22:46:18.296457 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 22:46:20.300925 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 22:46:18.296481 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 22:46:18.296490 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 22:46:18.296526 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 22:46:18.296537 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 22:46:18.296722 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 22:46:18.296756 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 22:46:18.296767 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 22:46:20.420775 systemd[1]: Stopped verity-setup.service. Jul 14 22:46:18.297076 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 22:46:18.297109 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 22:46:18.297124 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 22:46:18.297136 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 22:46:18.297149 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 22:46:18.297161 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:18Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 22:46:20.054814 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:20Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:46:20.055052 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:20Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:46:20.055133 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:20Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:46:20.055268 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:20Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 22:46:20.055310 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:20Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 22:46:20.055358 /usr/lib/systemd/system-generators/torcx-generator[915]: time="2025-07-14T22:46:20Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 22:46:20.421000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.423681 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:20.426217 systemd[1]: Started systemd-journald.service. Jul 14 22:46:20.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.426754 systemd[1]: Mounted dev-hugepages.mount. Jul 14 22:46:20.427591 systemd[1]: Mounted dev-mqueue.mount. Jul 14 22:46:20.428394 systemd[1]: Mounted media.mount. Jul 14 22:46:20.429152 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 22:46:20.430028 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 22:46:20.430916 systemd[1]: Mounted tmp.mount. Jul 14 22:46:20.431808 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 22:46:20.432000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.432853 systemd[1]: Finished kmod-static-nodes.service. Jul 14 22:46:20.433000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.433885 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 22:46:20.433997 systemd[1]: Finished modprobe@configfs.service. Jul 14 22:46:20.434000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.434000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.435039 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:46:20.435140 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:46:20.435000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.436137 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 22:46:20.436242 systemd[1]: Finished modprobe@drm.service. Jul 14 22:46:20.436000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.436000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.437286 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:46:20.437399 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:46:20.438000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.438000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.438444 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 22:46:20.438554 systemd[1]: Finished modprobe@fuse.service. Jul 14 22:46:20.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.439520 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:46:20.439625 systemd[1]: Finished modprobe@loop.service. Jul 14 22:46:20.439000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.439000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.440628 systemd[1]: Finished systemd-modules-load.service. Jul 14 22:46:20.440000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.441698 systemd[1]: Finished systemd-network-generator.service. Jul 14 22:46:20.441000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.442842 systemd[1]: Finished systemd-remount-fs.service. Jul 14 22:46:20.443000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.444009 systemd[1]: Reached target network-pre.target. Jul 14 22:46:20.445755 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 22:46:20.447379 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 22:46:20.448214 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 22:46:20.449219 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 22:46:20.450771 systemd[1]: Starting systemd-journal-flush.service... Jul 14 22:46:20.451884 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:46:20.452661 systemd[1]: Starting systemd-random-seed.service... Jul 14 22:46:20.453810 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:46:20.454558 systemd[1]: Starting systemd-sysctl.service... Jul 14 22:46:20.455839 systemd-journald[1004]: Time spent on flushing to /var/log/journal/d0e7a0edb2334a98acec25f0b2d29642 is 18.313ms for 1091 entries. Jul 14 22:46:20.455839 systemd-journald[1004]: System Journal (/var/log/journal/d0e7a0edb2334a98acec25f0b2d29642) is 8.0M, max 195.6M, 187.6M free. Jul 14 22:46:20.489400 systemd-journald[1004]: Received client request to flush runtime journal. Jul 14 22:46:20.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.472000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.477000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.478000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.456274 systemd[1]: Starting systemd-sysusers.service... Jul 14 22:46:20.461102 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 22:46:20.490314 udevadm[1020]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 14 22:46:20.462152 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 22:46:20.463472 systemd[1]: Finished systemd-random-seed.service. Jul 14 22:46:20.464579 systemd[1]: Reached target first-boot-complete.target. Jul 14 22:46:20.472720 systemd[1]: Finished systemd-sysusers.service. Jul 14 22:46:20.476375 systemd[1]: Finished systemd-sysctl.service. Jul 14 22:46:20.477405 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 22:46:20.479267 systemd[1]: Starting systemd-udev-settle.service... Jul 14 22:46:20.490043 systemd[1]: Finished systemd-journal-flush.service. Jul 14 22:46:20.490000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.877087 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 22:46:20.877000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.878000 audit: BPF prog-id=18 op=LOAD Jul 14 22:46:20.878000 audit: BPF prog-id=19 op=LOAD Jul 14 22:46:20.878000 audit: BPF prog-id=7 op=UNLOAD Jul 14 22:46:20.878000 audit: BPF prog-id=8 op=UNLOAD Jul 14 22:46:20.879237 systemd[1]: Starting systemd-udevd.service... Jul 14 22:46:20.893590 systemd-udevd[1022]: Using default interface naming scheme 'v252'. Jul 14 22:46:20.905041 systemd[1]: Started systemd-udevd.service. Jul 14 22:46:20.905000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.906000 audit: BPF prog-id=20 op=LOAD Jul 14 22:46:20.909108 systemd[1]: Starting systemd-networkd.service... Jul 14 22:46:20.914000 audit: BPF prog-id=21 op=LOAD Jul 14 22:46:20.915000 audit: BPF prog-id=22 op=LOAD Jul 14 22:46:20.915000 audit: BPF prog-id=23 op=LOAD Jul 14 22:46:20.916356 systemd[1]: Starting systemd-userdbd.service... Jul 14 22:46:20.939349 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 14 22:46:20.945831 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 22:46:20.951297 systemd[1]: Started systemd-userdbd.service. Jul 14 22:46:20.951000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.970655 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 14 22:46:20.975669 kernel: ACPI: button: Power Button [PWRF] Jul 14 22:46:20.986000 audit[1028]: AVC avc: denied { confidentiality } for pid=1028 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 14 22:46:20.986000 audit[1028]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561559b5d0a0 a1=338ac a2=7f69a7544bc5 a3=5 items=110 ppid=1022 pid=1028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:20.986000 audit: CWD cwd="/" Jul 14 22:46:20.986000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=1 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=2 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=3 name=(null) inode=14840 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=4 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=5 name=(null) inode=14841 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=6 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=7 name=(null) inode=14842 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=8 name=(null) inode=14842 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=9 name=(null) inode=14843 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=10 name=(null) inode=14842 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=11 name=(null) inode=14844 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=12 name=(null) inode=14842 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=13 name=(null) inode=14845 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=14 name=(null) inode=14842 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=15 name=(null) inode=14846 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=16 name=(null) inode=14842 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=17 name=(null) inode=14847 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=18 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=19 name=(null) inode=14848 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=20 name=(null) inode=14848 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=21 name=(null) inode=14849 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=22 name=(null) inode=14848 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=23 name=(null) inode=14850 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=24 name=(null) inode=14848 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=25 name=(null) inode=14851 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=26 name=(null) inode=14848 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=27 name=(null) inode=14852 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=28 name=(null) inode=14848 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=29 name=(null) inode=14853 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=30 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=31 name=(null) inode=14854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=32 name=(null) inode=14854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=33 name=(null) inode=14855 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=34 name=(null) inode=14854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=35 name=(null) inode=14856 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=36 name=(null) inode=14854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=37 name=(null) inode=14857 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=38 name=(null) inode=14854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=39 name=(null) inode=14858 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=40 name=(null) inode=14854 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=41 name=(null) inode=14859 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=42 name=(null) inode=14839 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=43 name=(null) inode=14860 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=44 name=(null) inode=14860 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=45 name=(null) inode=14861 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=46 name=(null) inode=14860 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=47 name=(null) inode=14862 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=48 name=(null) inode=14860 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=49 name=(null) inode=14863 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=50 name=(null) inode=14860 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.994603 systemd-networkd[1029]: lo: Link UP Jul 14 22:46:20.994606 systemd-networkd[1029]: lo: Gained carrier Jul 14 22:46:20.994983 systemd-networkd[1029]: Enumeration completed Jul 14 22:46:20.995054 systemd[1]: Started systemd-networkd.service. Jul 14 22:46:20.986000 audit: PATH item=51 name=(null) inode=14864 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=52 name=(null) inode=14860 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=53 name=(null) inode=14865 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=55 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=56 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=57 name=(null) inode=14867 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=58 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=59 name=(null) inode=14868 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=60 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=61 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=62 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=63 name=(null) inode=14870 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=64 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=65 name=(null) inode=14871 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=66 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=67 name=(null) inode=14872 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=68 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=69 name=(null) inode=14873 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=70 name=(null) inode=14869 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=71 name=(null) inode=14874 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=72 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=73 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=74 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=75 name=(null) inode=14876 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=76 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=77 name=(null) inode=14877 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=78 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=79 name=(null) inode=14878 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=80 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=81 name=(null) inode=14879 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=82 name=(null) inode=14875 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=83 name=(null) inode=14880 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=84 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=85 name=(null) inode=14881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=86 name=(null) inode=14881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=87 name=(null) inode=14882 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=88 name=(null) inode=14881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=89 name=(null) inode=14883 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=90 name=(null) inode=14881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=91 name=(null) inode=14884 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=92 name=(null) inode=14881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=93 name=(null) inode=14885 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=94 name=(null) inode=14881 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=95 name=(null) inode=14886 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=96 name=(null) inode=14866 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=97 name=(null) inode=14887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=98 name=(null) inode=14887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=99 name=(null) inode=14888 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=100 name=(null) inode=14887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=101 name=(null) inode=14889 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=102 name=(null) inode=14887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=103 name=(null) inode=14890 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=104 name=(null) inode=14887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=105 name=(null) inode=14891 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=106 name=(null) inode=14887 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=107 name=(null) inode=14892 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PATH item=109 name=(null) inode=14893 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:46:20.986000 audit: PROCTITLE proctitle="(udev-worker)" Jul 14 22:46:20.995000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:20.996195 systemd-networkd[1029]: eth0: Configuring with /usr/lib/systemd/network/zz-default.network. Jul 14 22:46:20.997100 systemd-networkd[1029]: eth0: Link UP Jul 14 22:46:20.997103 systemd-networkd[1029]: eth0: Gained carrier Jul 14 22:46:21.001654 kernel: input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input3 Jul 14 22:46:21.003647 kernel: i801_smbus 0000:00:1f.3: SMBus using PCI interrupt Jul 14 22:46:21.044996 kernel: i2c i2c-0: 1/1 memory slots populated (from DMI) Jul 14 22:46:21.045106 kernel: i2c i2c-0: Memory type 0x07 not supported yet, not instantiating SPD Jul 14 22:46:21.023743 systemd-networkd[1029]: eth0: DHCPv4 address 10.0.0.3/16, gateway 10.0.0.1 acquired from 10.0.0.1 Jul 14 22:46:21.050657 kernel: mousedev: PS/2 mouse device common for all mice Jul 14 22:46:21.069665 kernel: kvm: Nested Virtualization enabled Jul 14 22:46:21.069716 kernel: SVM: kvm: Nested Paging enabled Jul 14 22:46:21.069763 kernel: SVM: Virtual VMLOAD VMSAVE supported Jul 14 22:46:21.069780 kernel: SVM: Virtual GIF supported Jul 14 22:46:21.087661 kernel: EDAC MC: Ver: 3.0.0 Jul 14 22:46:21.125986 systemd[1]: Finished systemd-udev-settle.service. Jul 14 22:46:21.126000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.127882 systemd[1]: Starting lvm2-activation-early.service... Jul 14 22:46:21.134461 lvm[1057]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 22:46:21.155111 systemd[1]: Finished lvm2-activation-early.service. Jul 14 22:46:21.155000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.156034 systemd[1]: Reached target cryptsetup.target. Jul 14 22:46:21.157559 systemd[1]: Starting lvm2-activation.service... Jul 14 22:46:21.160310 lvm[1058]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 22:46:21.183815 systemd[1]: Finished lvm2-activation.service. Jul 14 22:46:21.184000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.184799 systemd[1]: Reached target local-fs-pre.target. Jul 14 22:46:21.185668 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 22:46:21.185692 systemd[1]: Reached target local-fs.target. Jul 14 22:46:21.186488 systemd[1]: Reached target machines.target. Jul 14 22:46:21.188350 systemd[1]: Starting ldconfig.service... Jul 14 22:46:21.189358 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.189394 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:21.190164 systemd[1]: Starting systemd-boot-update.service... Jul 14 22:46:21.191977 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 22:46:21.193855 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 22:46:21.195928 systemd[1]: Starting systemd-sysext.service... Jul 14 22:46:21.197037 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1060 (bootctl) Jul 14 22:46:21.198163 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 22:46:21.199969 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 22:46:21.200000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.206936 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 22:46:21.209923 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 22:46:21.210044 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 22:46:21.217656 kernel: loop0: detected capacity change from 0 to 224512 Jul 14 22:46:21.229451 systemd-fsck[1068]: fsck.fat 4.2 (2021-01-31) Jul 14 22:46:21.229451 systemd-fsck[1068]: /dev/vda1: 790 files, 120725/258078 clusters Jul 14 22:46:21.230687 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 22:46:21.231000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.233067 systemd[1]: Mounting boot.mount... Jul 14 22:46:21.251816 systemd[1]: Mounted boot.mount. Jul 14 22:46:21.548658 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 22:46:21.550818 systemd[1]: Finished systemd-boot-update.service. Jul 14 22:46:21.551000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.554097 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 22:46:21.554783 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 22:46:21.555000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.562651 kernel: loop1: detected capacity change from 0 to 224512 Jul 14 22:46:21.566138 (sd-sysext)[1073]: Using extensions 'kubernetes'. Jul 14 22:46:21.566492 (sd-sysext)[1073]: Merged extensions into '/usr'. Jul 14 22:46:21.581401 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.582778 systemd[1]: Mounting usr-share-oem.mount... Jul 14 22:46:21.583694 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.584656 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:46:21.586237 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:46:21.587829 systemd[1]: Starting modprobe@loop.service... Jul 14 22:46:21.588548 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.588664 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:21.588773 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.591223 systemd[1]: Mounted usr-share-oem.mount. Jul 14 22:46:21.592256 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:46:21.592351 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:46:21.592000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.592000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.593557 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:46:21.593659 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:46:21.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.594000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.594902 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:46:21.595007 systemd[1]: Finished modprobe@loop.service. Jul 14 22:46:21.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.595000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.596302 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:46:21.596399 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.597184 systemd[1]: Finished systemd-sysext.service. Jul 14 22:46:21.597000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.598899 systemd[1]: Starting ensure-sysext.service... Jul 14 22:46:21.600454 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 22:46:21.604888 systemd[1]: Reloading. Jul 14 22:46:21.609429 ldconfig[1059]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 22:46:21.611814 systemd-tmpfiles[1080]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 22:46:21.614266 systemd-tmpfiles[1080]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 22:46:21.616890 systemd-tmpfiles[1080]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 22:46:21.651854 /usr/lib/systemd/system-generators/torcx-generator[1099]: time="2025-07-14T22:46:21Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:46:21.652163 /usr/lib/systemd/system-generators/torcx-generator[1099]: time="2025-07-14T22:46:21Z" level=info msg="torcx already run" Jul 14 22:46:21.709302 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:46:21.709322 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:46:21.726101 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:46:21.775000 audit: BPF prog-id=24 op=LOAD Jul 14 22:46:21.776000 audit: BPF prog-id=15 op=UNLOAD Jul 14 22:46:21.776000 audit: BPF prog-id=25 op=LOAD Jul 14 22:46:21.776000 audit: BPF prog-id=26 op=LOAD Jul 14 22:46:21.776000 audit: BPF prog-id=16 op=UNLOAD Jul 14 22:46:21.776000 audit: BPF prog-id=17 op=UNLOAD Jul 14 22:46:21.776000 audit: BPF prog-id=27 op=LOAD Jul 14 22:46:21.776000 audit: BPF prog-id=20 op=UNLOAD Jul 14 22:46:21.777000 audit: BPF prog-id=28 op=LOAD Jul 14 22:46:21.777000 audit: BPF prog-id=29 op=LOAD Jul 14 22:46:21.777000 audit: BPF prog-id=18 op=UNLOAD Jul 14 22:46:21.777000 audit: BPF prog-id=19 op=UNLOAD Jul 14 22:46:21.778000 audit: BPF prog-id=30 op=LOAD Jul 14 22:46:21.778000 audit: BPF prog-id=21 op=UNLOAD Jul 14 22:46:21.778000 audit: BPF prog-id=31 op=LOAD Jul 14 22:46:21.779000 audit: BPF prog-id=32 op=LOAD Jul 14 22:46:21.779000 audit: BPF prog-id=22 op=UNLOAD Jul 14 22:46:21.779000 audit: BPF prog-id=23 op=UNLOAD Jul 14 22:46:21.781936 systemd[1]: Finished ldconfig.service. Jul 14 22:46:21.782000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ldconfig comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.782984 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 22:46:21.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.786489 systemd[1]: Starting audit-rules.service... Jul 14 22:46:21.788161 systemd[1]: Starting clean-ca-certificates.service... Jul 14 22:46:21.789887 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 22:46:21.790000 audit: BPF prog-id=33 op=LOAD Jul 14 22:46:21.791983 systemd[1]: Starting systemd-resolved.service... Jul 14 22:46:21.792000 audit: BPF prog-id=34 op=LOAD Jul 14 22:46:21.793828 systemd[1]: Starting systemd-timesyncd.service... Jul 14 22:46:21.795428 systemd[1]: Starting systemd-update-utmp.service... Jul 14 22:46:21.796689 systemd[1]: Finished clean-ca-certificates.service. Jul 14 22:46:21.796000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.799401 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:46:21.801000 audit[1148]: SYSTEM_BOOT pid=1148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.803857 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.804073 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.805405 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:46:21.806925 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:46:21.808490 systemd[1]: Starting modprobe@loop.service... Jul 14 22:46:21.809210 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.809559 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:21.809722 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:46:21.809832 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.811397 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 22:46:21.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.812753 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:46:21.812841 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:46:21.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.814000 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:46:21.814090 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:46:21.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.814000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.815410 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:46:21.815500 systemd[1]: Finished modprobe@loop.service. Jul 14 22:46:21.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.815000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.817228 systemd[1]: Finished systemd-update-utmp.service. Jul 14 22:46:21.817000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.819974 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.820135 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.821163 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:46:21.822775 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:46:21.824211 systemd[1]: Starting modprobe@loop.service... Jul 14 22:46:21.824916 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.825010 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:21.826051 systemd[1]: Starting systemd-update-done.service... Jul 14 22:46:21.827739 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:46:21.827845 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.828803 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:46:21.828927 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:46:21.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.829000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.830148 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:46:21.830240 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:46:21.831377 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:46:21.831480 systemd[1]: Finished modprobe@loop.service. Jul 14 22:46:21.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.830000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.832541 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:46:21.832623 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.834914 systemd[1]: Finished systemd-update-done.service. Jul 14 22:46:21.835000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-done comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.836170 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.836393 systemd[1]: ignition-delete-config.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.837361 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 22:46:21.838864 systemd[1]: Starting modprobe@drm.service... Jul 14 22:46:21.840419 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 22:46:21.841972 systemd[1]: Starting modprobe@loop.service... Jul 14 22:46:21.842767 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.842864 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:21.843822 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 22:46:21.846000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.846000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:21.846000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 22:46:21.846000 audit[1175]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff77d3a000 a2=420 a3=0 items=0 ppid=1142 pid=1175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:21.846000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 22:46:21.844866 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 22:46:21.848473 augenrules[1175]: No rules Jul 14 22:46:21.844965 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 22:46:21.846115 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 22:46:21.846231 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 22:46:21.846363 systemd-resolved[1145]: Positive Trust Anchors: Jul 14 22:46:21.846370 systemd-resolved[1145]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 22:46:21.846406 systemd-resolved[1145]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 22:46:21.847596 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 22:46:21.847770 systemd[1]: Finished modprobe@drm.service. Jul 14 22:46:21.849036 systemd[1]: Finished audit-rules.service. Jul 14 22:46:21.850077 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 22:46:21.850179 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 22:46:21.851314 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 22:46:21.851415 systemd[1]: Finished modprobe@loop.service. Jul 14 22:46:21.852809 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 22:46:21.852893 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 22:46:21.854514 systemd[1]: Finished ensure-sysext.service. Jul 14 22:46:21.857007 systemd[1]: Started systemd-timesyncd.service. Jul 14 22:46:21.857938 systemd[1]: Reached target time-set.target. Jul 14 22:46:22.271189 systemd-timesyncd[1147]: Contacted time server 10.0.0.1:123 (10.0.0.1). Jul 14 22:46:22.271223 systemd-timesyncd[1147]: Initial clock synchronization to Mon 2025-07-14 22:46:22.271135 UTC. Jul 14 22:46:22.272880 systemd-resolved[1145]: Defaulting to hostname 'linux'. Jul 14 22:46:22.274174 systemd[1]: Started systemd-resolved.service. Jul 14 22:46:22.275001 systemd[1]: Reached target network.target. Jul 14 22:46:22.275756 systemd[1]: Reached target nss-lookup.target. Jul 14 22:46:22.276546 systemd[1]: Reached target sysinit.target. Jul 14 22:46:22.277359 systemd[1]: Started motdgen.path. Jul 14 22:46:22.278035 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 22:46:22.279169 systemd[1]: Started logrotate.timer. Jul 14 22:46:22.279946 systemd[1]: Started mdadm.timer. Jul 14 22:46:22.280605 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 22:46:22.281416 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 22:46:22.281435 systemd[1]: Reached target paths.target. Jul 14 22:46:22.282147 systemd[1]: Reached target timers.target. Jul 14 22:46:22.283106 systemd[1]: Listening on dbus.socket. Jul 14 22:46:22.284519 systemd[1]: Starting docker.socket... Jul 14 22:46:22.287043 systemd[1]: Listening on sshd.socket. Jul 14 22:46:22.287856 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:22.288159 systemd[1]: Listening on docker.socket. Jul 14 22:46:22.288925 systemd[1]: Reached target sockets.target. Jul 14 22:46:22.289680 systemd[1]: Reached target basic.target. Jul 14 22:46:22.290414 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 22:46:22.290432 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 22:46:22.291164 systemd[1]: Starting containerd.service... Jul 14 22:46:22.292640 systemd[1]: Starting dbus.service... Jul 14 22:46:22.294067 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 22:46:22.295721 systemd[1]: Starting extend-filesystems.service... Jul 14 22:46:22.296577 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 22:46:22.297376 systemd[1]: Starting motdgen.service... Jul 14 22:46:22.298961 systemd[1]: Starting prepare-helm.service... Jul 14 22:46:22.300494 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 22:46:22.302206 systemd[1]: Starting sshd-keygen.service... Jul 14 22:46:22.302495 jq[1185]: false Jul 14 22:46:22.305063 systemd[1]: Starting systemd-logind.service... Jul 14 22:46:22.305780 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 22:46:22.305821 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 22:46:22.306111 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 22:46:22.306596 systemd[1]: Starting update-engine.service... Jul 14 22:46:22.308020 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 22:46:22.312039 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 22:46:22.312215 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 22:46:22.313040 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 22:46:22.313176 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 22:46:22.317051 jq[1198]: true Jul 14 22:46:22.322442 dbus-daemon[1184]: [system] SELinux support is enabled Jul 14 22:46:22.322624 systemd[1]: Started dbus.service. Jul 14 22:46:22.324653 extend-filesystems[1186]: Found loop1 Jul 14 22:46:22.325089 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 22:46:22.325110 systemd[1]: Reached target system-config.target. Jul 14 22:46:22.326075 tar[1203]: linux-amd64/LICENSE Jul 14 22:46:22.326262 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 22:46:22.326291 systemd[1]: Reached target user-config.target. Jul 14 22:46:22.326419 tar[1203]: linux-amd64/helm Jul 14 22:46:22.329698 extend-filesystems[1186]: Found sr0 Jul 14 22:46:22.330460 extend-filesystems[1186]: Found vda Jul 14 22:46:22.330379 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda1 Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda2 Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda3 Jul 14 22:46:22.331254 extend-filesystems[1186]: Found usr Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda4 Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda6 Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda7 Jul 14 22:46:22.331254 extend-filesystems[1186]: Found vda9 Jul 14 22:46:22.331254 extend-filesystems[1186]: Checking size of /dev/vda9 Jul 14 22:46:22.330515 systemd[1]: Finished motdgen.service. Jul 14 22:46:22.338626 jq[1209]: true Jul 14 22:46:22.345137 env[1204]: time="2025-07-14T22:46:22.345094483Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 22:46:22.359474 update_engine[1195]: I0714 22:46:22.355182 1195 main.cc:92] Flatcar Update Engine starting Jul 14 22:46:22.359474 update_engine[1195]: I0714 22:46:22.357729 1195 update_check_scheduler.cc:74] Next update check in 3m1s Jul 14 22:46:22.357710 systemd[1]: Started update-engine.service. Jul 14 22:46:22.358095 systemd-logind[1194]: Watching system buttons on /dev/input/event1 (Power Button) Jul 14 22:46:22.358110 systemd-logind[1194]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 14 22:46:22.359468 systemd-logind[1194]: New seat seat0. Jul 14 22:46:22.361600 systemd[1]: Started locksmithd.service. Jul 14 22:46:22.362746 systemd[1]: Started systemd-logind.service. Jul 14 22:46:22.366902 extend-filesystems[1186]: Resized partition /dev/vda9 Jul 14 22:46:22.369155 extend-filesystems[1238]: resize2fs 1.46.5 (30-Dec-2021) Jul 14 22:46:22.372428 env[1204]: time="2025-07-14T22:46:22.372388390Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 22:46:22.372575 env[1204]: time="2025-07-14T22:46:22.372547849Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:46:22.374548 kernel: EXT4-fs (vda9): resizing filesystem from 553472 to 1864699 blocks Jul 14 22:46:22.375061 env[1204]: time="2025-07-14T22:46:22.375028419Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375061 env[1204]: time="2025-07-14T22:46:22.375055870Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375253 env[1204]: time="2025-07-14T22:46:22.375224837Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375253 env[1204]: time="2025-07-14T22:46:22.375247389Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375339 env[1204]: time="2025-07-14T22:46:22.375259292Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 22:46:22.375339 env[1204]: time="2025-07-14T22:46:22.375288256Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375382 env[1204]: time="2025-07-14T22:46:22.375348749Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375580 env[1204]: time="2025-07-14T22:46:22.375556950Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375685 env[1204]: time="2025-07-14T22:46:22.375660824Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 22:46:22.375685 env[1204]: time="2025-07-14T22:46:22.375678778Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 22:46:22.375747 env[1204]: time="2025-07-14T22:46:22.375717591Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 22:46:22.375747 env[1204]: time="2025-07-14T22:46:22.375728812Z" level=info msg="metadata content store policy set" policy=shared Jul 14 22:46:22.409555 kernel: EXT4-fs (vda9): resized filesystem to 1864699 Jul 14 22:46:22.414867 locksmithd[1234]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 22:46:22.436454 extend-filesystems[1238]: Filesystem at /dev/vda9 is mounted on /; on-line resizing required Jul 14 22:46:22.436454 extend-filesystems[1238]: old_desc_blocks = 1, new_desc_blocks = 1 Jul 14 22:46:22.436454 extend-filesystems[1238]: The filesystem on /dev/vda9 is now 1864699 (4k) blocks long. Jul 14 22:46:22.435306 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435056019Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435091115Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435103528Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435134045Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435149013Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435162439Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435174090Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435190621Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435201973Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435213484Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435224515Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435235476Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435349189Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 22:46:22.442600 env[1204]: time="2025-07-14T22:46:22.435412698Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 22:46:22.442867 bash[1235]: Updated "/home/core/.ssh/authorized_keys" Jul 14 22:46:22.442932 extend-filesystems[1186]: Resized filesystem in /dev/vda9 Jul 14 22:46:22.435447 systemd[1]: Finished extend-filesystems.service. Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435684347Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435705807Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435716908Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435760059Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435770999Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435781179Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435791257Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435801016Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435811736Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435821364Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435830591Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435842153Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435932352Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435944976Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.443841 env[1204]: time="2025-07-14T22:46:22.435955966Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.437085 systemd[1]: Started containerd.service. Jul 14 22:46:22.444195 env[1204]: time="2025-07-14T22:46:22.435967808Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 22:46:22.444195 env[1204]: time="2025-07-14T22:46:22.435980512Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 22:46:22.444195 env[1204]: time="2025-07-14T22:46:22.435989870Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 22:46:22.444195 env[1204]: time="2025-07-14T22:46:22.436006491Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 22:46:22.444195 env[1204]: time="2025-07-14T22:46:22.436037880Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 22:46:22.438841 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.436196347Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.436244227Z" level=info msg="Connect containerd service" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.436283009Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.436820106Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.436993261Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437020512Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437580722Z" level=info msg="containerd successfully booted in 0.102247s" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437605348Z" level=info msg="Start subscribing containerd event" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437648259Z" level=info msg="Start recovering state" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437692371Z" level=info msg="Start event monitor" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437708992Z" level=info msg="Start snapshots syncer" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437715815Z" level=info msg="Start cni network conf syncer for default" Jul 14 22:46:22.444334 env[1204]: time="2025-07-14T22:46:22.437722027Z" level=info msg="Start streaming server" Jul 14 22:46:22.578617 systemd-networkd[1029]: eth0: Gained IPv6LL Jul 14 22:46:22.580206 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 22:46:22.581600 systemd[1]: Reached target network-online.target. Jul 14 22:46:22.583843 systemd[1]: Starting kubelet.service... Jul 14 22:46:22.657966 sshd_keygen[1202]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 22:46:22.675494 systemd[1]: Finished sshd-keygen.service. Jul 14 22:46:22.677761 systemd[1]: Starting issuegen.service... Jul 14 22:46:22.682079 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 22:46:22.682201 systemd[1]: Finished issuegen.service. Jul 14 22:46:22.683934 systemd[1]: Starting systemd-user-sessions.service... Jul 14 22:46:22.688755 systemd[1]: Finished systemd-user-sessions.service. Jul 14 22:46:22.690843 systemd[1]: Started getty@tty1.service. Jul 14 22:46:22.692606 systemd[1]: Started serial-getty@ttyS0.service. Jul 14 22:46:22.693642 systemd[1]: Reached target getty.target. Jul 14 22:46:22.789598 tar[1203]: linux-amd64/README.md Jul 14 22:46:22.793598 systemd[1]: Finished prepare-helm.service. Jul 14 22:46:23.218002 systemd[1]: Started kubelet.service. Jul 14 22:46:23.219139 systemd[1]: Reached target multi-user.target. Jul 14 22:46:23.220930 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 22:46:23.227452 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 22:46:23.227613 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 22:46:23.228696 systemd[1]: Startup finished in 582ms (kernel) + 10.118s (initrd) + 4.993s (userspace) = 15.694s. Jul 14 22:46:23.591381 kubelet[1265]: E0714 22:46:23.591267 1265 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:46:23.592933 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:46:23.593047 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:46:32.130236 systemd[1]: Created slice system-sshd.slice. Jul 14 22:46:32.131088 systemd[1]: Started sshd@0-10.0.0.3:22-10.0.0.1:56946.service. Jul 14 22:46:32.162879 sshd[1274]: Accepted publickey for core from 10.0.0.1 port 56946 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:32.164114 sshd[1274]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:32.171578 systemd-logind[1194]: New session 1 of user core. Jul 14 22:46:32.172565 systemd[1]: Created slice user-500.slice. Jul 14 22:46:32.173538 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 22:46:32.180561 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 22:46:32.181732 systemd[1]: Starting user@500.service... Jul 14 22:46:32.183782 (systemd)[1277]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:32.245518 systemd[1277]: Queued start job for default target default.target. Jul 14 22:46:32.245889 systemd[1277]: Reached target paths.target. Jul 14 22:46:32.245908 systemd[1277]: Reached target sockets.target. Jul 14 22:46:32.245919 systemd[1277]: Reached target timers.target. Jul 14 22:46:32.245929 systemd[1277]: Reached target basic.target. Jul 14 22:46:32.245966 systemd[1277]: Reached target default.target. Jul 14 22:46:32.245986 systemd[1277]: Startup finished in 57ms. Jul 14 22:46:32.246039 systemd[1]: Started user@500.service. Jul 14 22:46:32.247002 systemd[1]: Started session-1.scope. Jul 14 22:46:32.296986 systemd[1]: Started sshd@1-10.0.0.3:22-10.0.0.1:56948.service. Jul 14 22:46:32.330014 sshd[1286]: Accepted publickey for core from 10.0.0.1 port 56948 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:32.330996 sshd[1286]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:32.334008 systemd-logind[1194]: New session 2 of user core. Jul 14 22:46:32.334897 systemd[1]: Started session-2.scope. Jul 14 22:46:32.386214 sshd[1286]: pam_unix(sshd:session): session closed for user core Jul 14 22:46:32.388299 systemd[1]: sshd@1-10.0.0.3:22-10.0.0.1:56948.service: Deactivated successfully. Jul 14 22:46:32.388735 systemd[1]: session-2.scope: Deactivated successfully. Jul 14 22:46:32.389186 systemd-logind[1194]: Session 2 logged out. Waiting for processes to exit. Jul 14 22:46:32.389874 systemd[1]: Started sshd@2-10.0.0.3:22-10.0.0.1:56960.service. Jul 14 22:46:32.390601 systemd-logind[1194]: Removed session 2. Jul 14 22:46:32.417937 sshd[1292]: Accepted publickey for core from 10.0.0.1 port 56960 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:32.418798 sshd[1292]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:32.421363 systemd-logind[1194]: New session 3 of user core. Jul 14 22:46:32.422037 systemd[1]: Started session-3.scope. Jul 14 22:46:32.469512 sshd[1292]: pam_unix(sshd:session): session closed for user core Jul 14 22:46:32.471474 systemd[1]: sshd@2-10.0.0.3:22-10.0.0.1:56960.service: Deactivated successfully. Jul 14 22:46:32.471886 systemd[1]: session-3.scope: Deactivated successfully. Jul 14 22:46:32.472280 systemd-logind[1194]: Session 3 logged out. Waiting for processes to exit. Jul 14 22:46:32.472977 systemd[1]: Started sshd@3-10.0.0.3:22-10.0.0.1:56968.service. Jul 14 22:46:32.473510 systemd-logind[1194]: Removed session 3. Jul 14 22:46:32.500753 sshd[1298]: Accepted publickey for core from 10.0.0.1 port 56968 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:32.501630 sshd[1298]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:32.504266 systemd-logind[1194]: New session 4 of user core. Jul 14 22:46:32.505063 systemd[1]: Started session-4.scope. Jul 14 22:46:32.555750 sshd[1298]: pam_unix(sshd:session): session closed for user core Jul 14 22:46:32.557862 systemd[1]: sshd@3-10.0.0.3:22-10.0.0.1:56968.service: Deactivated successfully. Jul 14 22:46:32.558276 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 22:46:32.558644 systemd-logind[1194]: Session 4 logged out. Waiting for processes to exit. Jul 14 22:46:32.559337 systemd[1]: Started sshd@4-10.0.0.3:22-10.0.0.1:56978.service. Jul 14 22:46:32.560059 systemd-logind[1194]: Removed session 4. Jul 14 22:46:32.586971 sshd[1304]: Accepted publickey for core from 10.0.0.1 port 56978 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:32.587741 sshd[1304]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:32.590400 systemd-logind[1194]: New session 5 of user core. Jul 14 22:46:32.591058 systemd[1]: Started session-5.scope. Jul 14 22:46:33.232130 sudo[1307]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 22:46:33.232364 sudo[1307]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:46:33.243720 dbus-daemon[1184]: \xd0\xfd\xb44\u007fU: received setenforce notice (enforcing=-1654132960) Jul 14 22:46:33.245228 sudo[1307]: pam_unix(sudo:session): session closed for user root Jul 14 22:46:33.246491 sshd[1304]: pam_unix(sshd:session): session closed for user core Jul 14 22:46:33.248788 systemd[1]: sshd@4-10.0.0.3:22-10.0.0.1:56978.service: Deactivated successfully. Jul 14 22:46:33.249226 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 22:46:33.249742 systemd-logind[1194]: Session 5 logged out. Waiting for processes to exit. Jul 14 22:46:33.250541 systemd[1]: Started sshd@5-10.0.0.3:22-10.0.0.1:56988.service. Jul 14 22:46:33.251203 systemd-logind[1194]: Removed session 5. Jul 14 22:46:33.279978 sshd[1311]: Accepted publickey for core from 10.0.0.1 port 56988 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:33.280811 sshd[1311]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:33.283564 systemd-logind[1194]: New session 6 of user core. Jul 14 22:46:33.284232 systemd[1]: Started session-6.scope. Jul 14 22:46:33.333725 sudo[1315]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 22:46:33.333887 sudo[1315]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:46:33.335679 sudo[1315]: pam_unix(sudo:session): session closed for user root Jul 14 22:46:33.338935 sudo[1314]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 22:46:33.339159 sudo[1314]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:46:33.345762 systemd[1]: Stopping audit-rules.service... Jul 14 22:46:33.345000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 22:46:33.346497 auditctl[1318]: No rules Jul 14 22:46:33.346743 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 22:46:33.346855 systemd[1]: Stopped audit-rules.service. Jul 14 22:46:33.347333 kernel: kauditd_printk_skb: 277 callbacks suppressed Jul 14 22:46:33.347379 kernel: audit: type=1305 audit(1752533193.345:199): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 22:46:33.345000 audit[1318]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffee816bcc0 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.349492 systemd[1]: Starting audit-rules.service... Jul 14 22:46:33.355338 kernel: audit: type=1300 audit(1752533193.345:199): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffee816bcc0 a2=420 a3=0 items=0 ppid=1 pid=1318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.355388 kernel: audit: type=1327 audit(1752533193.345:199): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 22:46:33.345000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 22:46:33.345000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.358562 kernel: audit: type=1131 audit(1752533193.345:200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.366384 augenrules[1335]: No rules Jul 14 22:46:33.366850 systemd[1]: Finished audit-rules.service. Jul 14 22:46:33.366000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.367515 sudo[1314]: pam_unix(sudo:session): session closed for user root Jul 14 22:46:33.368499 sshd[1311]: pam_unix(sshd:session): session closed for user core Jul 14 22:46:33.370320 systemd[1]: sshd@5-10.0.0.3:22-10.0.0.1:56988.service: Deactivated successfully. Jul 14 22:46:33.366000 audit[1314]: USER_END pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.370727 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 22:46:33.371129 systemd-logind[1194]: Session 6 logged out. Waiting for processes to exit. Jul 14 22:46:33.371830 systemd[1]: Started sshd@6-10.0.0.3:22-10.0.0.1:56998.service. Jul 14 22:46:33.372625 systemd-logind[1194]: Removed session 6. Jul 14 22:46:33.374456 kernel: audit: type=1130 audit(1752533193.366:201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.374493 kernel: audit: type=1106 audit(1752533193.366:202): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.374514 kernel: audit: type=1104 audit(1752533193.366:203): pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.366000 audit[1314]: CRED_DISP pid=1314 uid=500 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.377501 kernel: audit: type=1106 audit(1752533193.366:204): pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.366000 audit[1311]: USER_END pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.381938 kernel: audit: type=1104 audit(1752533193.366:205): pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.366000 audit[1311]: CRED_DISP pid=1311 uid=0 auid=500 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.385607 kernel: audit: type=1131 audit(1752533193.366:206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.3:22-10.0.0.1:56988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.366000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-10.0.0.3:22-10.0.0.1:56988 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.3:22-10.0.0.1:56998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.402000 audit[1341]: USER_ACCT pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.403446 sshd[1341]: Accepted publickey for core from 10.0.0.1 port 56998 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:46:33.403000 audit[1341]: CRED_ACQ pid=1341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.403000 audit[1341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd621d5c70 a2=3 a3=0 items=0 ppid=1 pid=1341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.403000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:46:33.404206 sshd[1341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:46:33.406894 systemd-logind[1194]: New session 7 of user core. Jul 14 22:46:33.407611 systemd[1]: Started session-7.scope. Jul 14 22:46:33.409000 audit[1341]: USER_START pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.410000 audit[1343]: CRED_ACQ pid=1343 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:46:33.455000 audit[1344]: USER_ACCT pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.456515 sudo[1344]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 22:46:33.456000 audit[1344]: CRED_REFR pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.456692 sudo[1344]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 22:46:33.457000 audit[1344]: USER_START pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.473238 systemd[1]: Starting docker.service... Jul 14 22:46:33.505703 env[1356]: time="2025-07-14T22:46:33.505554760Z" level=info msg="Starting up" Jul 14 22:46:33.506878 env[1356]: time="2025-07-14T22:46:33.506854607Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 22:46:33.506878 env[1356]: time="2025-07-14T22:46:33.506870537Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 22:46:33.506951 env[1356]: time="2025-07-14T22:46:33.506889643Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 22:46:33.506951 env[1356]: time="2025-07-14T22:46:33.506901866Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 22:46:33.512552 env[1356]: time="2025-07-14T22:46:33.512506813Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 22:46:33.512552 env[1356]: time="2025-07-14T22:46:33.512546968Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 22:46:33.512616 env[1356]: time="2025-07-14T22:46:33.512573268Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 22:46:33.512616 env[1356]: time="2025-07-14T22:46:33.512583557Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 22:46:33.545115 env[1356]: time="2025-07-14T22:46:33.545081870Z" level=info msg="Loading containers: start." Jul 14 22:46:33.591000 audit[1389]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1389 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.591000 audit[1389]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffcf22ad1a0 a2=0 a3=7ffcf22ad18c items=0 ppid=1356 pid=1389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.591000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 22:46:33.593000 audit[1391]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1391 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.593000 audit[1391]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff9affefc0 a2=0 a3=7fff9affefac items=0 ppid=1356 pid=1391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.593000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 22:46:33.594000 audit[1393]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1393 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.594000 audit[1393]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd0f03bec0 a2=0 a3=7ffd0f03beac items=0 ppid=1356 pid=1393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.594000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 22:46:33.596000 audit[1395]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1395 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.596000 audit[1395]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc10941240 a2=0 a3=7ffc1094122c items=0 ppid=1356 pid=1395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.596000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 22:46:33.597000 audit[1397]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1397 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.597000 audit[1397]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffce116150 a2=0 a3=7fffce11613c items=0 ppid=1356 pid=1397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.597000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 22:46:33.616000 audit[1402]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1402 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.616000 audit[1402]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdb05b3bb0 a2=0 a3=7ffdb05b3b9c items=0 ppid=1356 pid=1402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.616000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 22:46:33.625000 audit[1404]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1404 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.625000 audit[1404]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe951ce660 a2=0 a3=7ffe951ce64c items=0 ppid=1356 pid=1404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.625000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 22:46:33.627000 audit[1406]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1406 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.627000 audit[1406]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffff30d0d90 a2=0 a3=7ffff30d0d7c items=0 ppid=1356 pid=1406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.627000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 22:46:33.628000 audit[1408]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1408 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.628000 audit[1408]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd2ea99d60 a2=0 a3=7ffd2ea99d4c items=0 ppid=1356 pid=1408 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.628000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:46:33.635000 audit[1412]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1412 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.635000 audit[1412]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc7fdc0860 a2=0 a3=7ffc7fdc084c items=0 ppid=1356 pid=1412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.635000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:46:33.640000 audit[1413]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1413 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.640000 audit[1413]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffc1eecd0c0 a2=0 a3=7ffc1eecd0ac items=0 ppid=1356 pid=1413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.640000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:46:33.648539 kernel: Initializing XFRM netlink socket Jul 14 22:46:33.673719 env[1356]: time="2025-07-14T22:46:33.673687770Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 22:46:33.680000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.680000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:33.681002 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 22:46:33.681207 systemd[1]: Stopped kubelet.service. Jul 14 22:46:33.682565 systemd[1]: Starting kubelet.service... Jul 14 22:46:33.687000 audit[1424]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1424 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.687000 audit[1424]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7fffef5836b0 a2=0 a3=7fffef58369c items=0 ppid=1356 pid=1424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.687000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 22:46:33.698000 audit[1427]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1427 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.698000 audit[1427]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7fffa5213570 a2=0 a3=7fffa521355c items=0 ppid=1356 pid=1427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.698000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 22:46:33.700000 audit[1430]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1430 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.700000 audit[1430]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffc8c6646f0 a2=0 a3=7ffc8c6646dc items=0 ppid=1356 pid=1430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.700000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 22:46:33.701000 audit[1432]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1432 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.701000 audit[1432]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffec9b0aa0 a2=0 a3=7fffec9b0a8c items=0 ppid=1356 pid=1432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.701000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 22:46:33.703000 audit[1434]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1434 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.703000 audit[1434]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffea22ac970 a2=0 a3=7ffea22ac95c items=0 ppid=1356 pid=1434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.703000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 22:46:33.705000 audit[1436]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1436 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.705000 audit[1436]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd581184b0 a2=0 a3=7ffd5811849c items=0 ppid=1356 pid=1436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.705000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 22:46:33.706000 audit[1438]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1438 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.706000 audit[1438]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd710235d0 a2=0 a3=7ffd710235bc items=0 ppid=1356 pid=1438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.706000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 22:46:33.712000 audit[1441]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1441 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.712000 audit[1441]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7fff81f56ca0 a2=0 a3=7fff81f56c8c items=0 ppid=1356 pid=1441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.712000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 22:46:33.714000 audit[1443]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1443 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.714000 audit[1443]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffd8fadbf40 a2=0 a3=7ffd8fadbf2c items=0 ppid=1356 pid=1443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.714000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 22:46:33.715000 audit[1445]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1445 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.715000 audit[1445]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffe22e18540 a2=0 a3=7ffe22e1852c items=0 ppid=1356 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.715000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 22:46:33.717000 audit[1447]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1447 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:33.717000 audit[1447]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc91f5b1d0 a2=0 a3=7ffc91f5b1bc items=0 ppid=1356 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:33.717000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 22:46:33.718147 systemd-networkd[1029]: docker0: Link UP Jul 14 22:46:33.880703 systemd[1]: Started kubelet.service. Jul 14 22:46:33.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:34.058694 kubelet[1450]: E0714 22:46:34.058648 1450 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:46:34.061116 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:46:34.061225 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:46:34.060000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:46:34.138000 audit[1460]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1460 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:34.138000 audit[1460]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffee657eb30 a2=0 a3=7ffee657eb1c items=0 ppid=1356 pid=1460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:34.138000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:46:34.144000 audit[1461]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1461 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:34.144000 audit[1461]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe5c25c290 a2=0 a3=7ffe5c25c27c items=0 ppid=1356 pid=1461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:34.144000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 22:46:34.145437 env[1356]: time="2025-07-14T22:46:34.145406634Z" level=info msg="Loading containers: done." Jul 14 22:46:34.152693 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck3002050986-merged.mount: Deactivated successfully. Jul 14 22:46:34.158865 env[1356]: time="2025-07-14T22:46:34.158831641Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 22:46:34.159001 env[1356]: time="2025-07-14T22:46:34.158979088Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 22:46:34.159059 env[1356]: time="2025-07-14T22:46:34.159048508Z" level=info msg="Daemon has completed initialization" Jul 14 22:46:34.174180 systemd[1]: Started docker.service. Jul 14 22:46:34.173000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:34.179728 env[1356]: time="2025-07-14T22:46:34.179682800Z" level=info msg="API listen on /run/docker.sock" Jul 14 22:46:34.926597 env[1204]: time="2025-07-14T22:46:34.926552163Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\"" Jul 14 22:46:35.505206 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3190024181.mount: Deactivated successfully. Jul 14 22:46:36.888099 env[1204]: time="2025-07-14T22:46:36.888037397Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:36.890034 env[1204]: time="2025-07-14T22:46:36.889984938Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:36.891823 env[1204]: time="2025-07-14T22:46:36.891778571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:36.893388 env[1204]: time="2025-07-14T22:46:36.893345929Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:0f5764551d7de4ef70489ff8a70f32df7dea00701f5545af089b60bc5ede4f6f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:36.894106 env[1204]: time="2025-07-14T22:46:36.894066540Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.32.6\" returns image reference \"sha256:8c5b95b1b5cb4a908fcbbbe81697c57019f9e9d89bfb5e0355235d440b7a6aa9\"" Jul 14 22:46:36.894760 env[1204]: time="2025-07-14T22:46:36.894733630Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\"" Jul 14 22:46:38.467153 env[1204]: time="2025-07-14T22:46:38.467093013Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:38.469037 env[1204]: time="2025-07-14T22:46:38.468979579Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:38.470655 env[1204]: time="2025-07-14T22:46:38.470634882Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:38.472119 env[1204]: time="2025-07-14T22:46:38.472083728Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3425f29c94a77d74cb89f38413e6274277dcf5e2bc7ab6ae953578a91e9e8356,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:38.472751 env[1204]: time="2025-07-14T22:46:38.472719160Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.32.6\" returns image reference \"sha256:77d0e7de0c6b41e2331c3997698c3f917527cf7bbe462f5c813f514e788436de\"" Jul 14 22:46:38.473188 env[1204]: time="2025-07-14T22:46:38.473165767Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\"" Jul 14 22:46:40.370710 env[1204]: time="2025-07-14T22:46:40.370642829Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:40.372748 env[1204]: time="2025-07-14T22:46:40.372701097Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:40.374428 env[1204]: time="2025-07-14T22:46:40.374398008Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:40.376130 env[1204]: time="2025-07-14T22:46:40.376100009Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:130f633cbd1d70e2f4655350153cb3fc469f4d5a6310b4f0b49d93fb2ba2132b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:40.376729 env[1204]: time="2025-07-14T22:46:40.376706937Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.32.6\" returns image reference \"sha256:b34d1cd163151c2491919f315274d85bff904721213f2b19341b403a28a39ae2\"" Jul 14 22:46:40.377181 env[1204]: time="2025-07-14T22:46:40.377158082Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\"" Jul 14 22:46:41.565096 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1850494526.mount: Deactivated successfully. Jul 14 22:46:42.736547 env[1204]: time="2025-07-14T22:46:42.736489065Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:42.738539 env[1204]: time="2025-07-14T22:46:42.738504974Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:42.739971 env[1204]: time="2025-07-14T22:46:42.739945635Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.32.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:42.741353 env[1204]: time="2025-07-14T22:46:42.741296047Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:b13d9da413b983d130bf090b83fce12e1ccc704e95f366da743c18e964d9d7e9,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:42.741797 env[1204]: time="2025-07-14T22:46:42.741765657Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.32.6\" returns image reference \"sha256:63f0cbe3b7339c5d006efc9964228e48271bae73039320037c451b5e8f763e02\"" Jul 14 22:46:42.742314 env[1204]: time="2025-07-14T22:46:42.742274561Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 14 22:46:43.253251 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3450364529.mount: Deactivated successfully. Jul 14 22:46:44.200201 env[1204]: time="2025-07-14T22:46:44.200143575Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:44.202106 env[1204]: time="2025-07-14T22:46:44.202071499Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:44.204045 env[1204]: time="2025-07-14T22:46:44.203998221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:44.205864 env[1204]: time="2025-07-14T22:46:44.205827881Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:44.206414 env[1204]: time="2025-07-14T22:46:44.206387760Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 14 22:46:44.206944 env[1204]: time="2025-07-14T22:46:44.206917914Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 22:46:44.311941 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 22:46:44.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:44.312113 systemd[1]: Stopped kubelet.service. Jul 14 22:46:44.312955 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 14 22:46:44.312996 kernel: audit: type=1130 audit(1752533204.311:245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:44.313271 systemd[1]: Starting kubelet.service... Jul 14 22:46:44.311000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:44.318700 kernel: audit: type=1131 audit(1752533204.311:246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:44.393424 systemd[1]: Started kubelet.service. Jul 14 22:46:44.393000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:44.397551 kernel: audit: type=1130 audit(1752533204.393:247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:44.524386 kernel: audit: type=1131 audit(1752533204.506:248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:46:44.506000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 22:46:44.524598 kubelet[1503]: E0714 22:46:44.505727 1503 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 22:46:44.507113 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 22:46:44.507217 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 22:46:45.120787 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1400317419.mount: Deactivated successfully. Jul 14 22:46:45.126614 env[1204]: time="2025-07-14T22:46:45.126562730Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:45.128535 env[1204]: time="2025-07-14T22:46:45.128485314Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:45.130016 env[1204]: time="2025-07-14T22:46:45.129977221Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:45.131476 env[1204]: time="2025-07-14T22:46:45.131441165Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:45.131985 env[1204]: time="2025-07-14T22:46:45.131953936Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 14 22:46:45.132388 env[1204]: time="2025-07-14T22:46:45.132368684Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\"" Jul 14 22:46:45.683699 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1445895736.mount: Deactivated successfully. Jul 14 22:46:48.797161 env[1204]: time="2025-07-14T22:46:48.797114273Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:48.799090 env[1204]: time="2025-07-14T22:46:48.799069909Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:48.800878 env[1204]: time="2025-07-14T22:46:48.800836461Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.16-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:48.802415 env[1204]: time="2025-07-14T22:46:48.802388681Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:c6a9d11cc5c04b114ccdef39a9265eeef818e3d02f5359be035ae784097fdec5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:48.803120 env[1204]: time="2025-07-14T22:46:48.803096317Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.16-0\" returns image reference \"sha256:a9e7e6b294baf1695fccb862d956c5d3ad8510e1e4ca1535f35dc09f247abbfc\"" Jul 14 22:46:50.515789 systemd[1]: Stopped kubelet.service. Jul 14 22:46:50.515000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:50.517472 systemd[1]: Starting kubelet.service... Jul 14 22:46:50.515000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:50.522339 kernel: audit: type=1130 audit(1752533210.515:249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:50.522433 kernel: audit: type=1131 audit(1752533210.515:250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:50.535720 systemd[1]: Reloading. Jul 14 22:46:50.602901 /usr/lib/systemd/system-generators/torcx-generator[1556]: time="2025-07-14T22:46:50Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:46:50.602926 /usr/lib/systemd/system-generators/torcx-generator[1556]: time="2025-07-14T22:46:50Z" level=info msg="torcx already run" Jul 14 22:46:50.966775 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:46:50.966792 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:46:50.983580 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047498 kernel: audit: type=1400 audit(1752533211.040:251): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047545 kernel: audit: type=1400 audit(1752533211.040:252): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047565 kernel: audit: type=1400 audit(1752533211.040:253): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053577 kernel: audit: type=1400 audit(1752533211.040:254): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053609 kernel: audit: type=1400 audit(1752533211.040:255): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059597 kernel: audit: type=1400 audit(1752533211.040:256): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059632 kernel: audit: type=1400 audit(1752533211.040:257): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.065477 kernel: audit: type=1400 audit(1752533211.040:258): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.040000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.046000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.046000 audit: BPF prog-id=40 op=LOAD Jul 14 22:46:51.046000 audit: BPF prog-id=24 op=UNLOAD Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.047000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit: BPF prog-id=41 op=LOAD Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit: BPF prog-id=42 op=LOAD Jul 14 22:46:51.053000 audit: BPF prog-id=25 op=UNLOAD Jul 14 22:46:51.053000 audit: BPF prog-id=26 op=UNLOAD Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit: BPF prog-id=43 op=LOAD Jul 14 22:46:51.056000 audit: BPF prog-id=35 op=UNLOAD Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.056000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit: BPF prog-id=44 op=LOAD Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.059000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.062000 audit: BPF prog-id=45 op=LOAD Jul 14 22:46:51.062000 audit: BPF prog-id=36 op=UNLOAD Jul 14 22:46:51.062000 audit: BPF prog-id=37 op=UNLOAD Jul 14 22:46:51.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.062000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.062000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.064000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.064000 audit: BPF prog-id=46 op=LOAD Jul 14 22:46:51.064000 audit: BPF prog-id=27 op=UNLOAD Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.066000 audit: BPF prog-id=47 op=LOAD Jul 14 22:46:51.066000 audit: BPF prog-id=33 op=UNLOAD Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit: BPF prog-id=48 op=LOAD Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.067000 audit: BPF prog-id=49 op=LOAD Jul 14 22:46:51.067000 audit: BPF prog-id=28 op=UNLOAD Jul 14 22:46:51.067000 audit: BPF prog-id=29 op=UNLOAD Jul 14 22:46:51.067000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit: BPF prog-id=50 op=LOAD Jul 14 22:46:51.068000 audit: BPF prog-id=34 op=UNLOAD Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.068000 audit: BPF prog-id=51 op=LOAD Jul 14 22:46:51.068000 audit: BPF prog-id=38 op=UNLOAD Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit: BPF prog-id=52 op=LOAD Jul 14 22:46:51.069000 audit: BPF prog-id=30 op=UNLOAD Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit: BPF prog-id=53 op=LOAD Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.069000 audit: BPF prog-id=54 op=LOAD Jul 14 22:46:51.069000 audit: BPF prog-id=31 op=UNLOAD Jul 14 22:46:51.069000 audit: BPF prog-id=32 op=UNLOAD Jul 14 22:46:51.077706 systemd[1]: Started kubelet.service. Jul 14 22:46:51.077000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:51.080362 systemd[1]: Stopping kubelet.service... Jul 14 22:46:51.080967 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 22:46:51.081150 systemd[1]: Stopped kubelet.service. Jul 14 22:46:51.080000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:51.082693 systemd[1]: Starting kubelet.service... Jul 14 22:46:51.161876 systemd[1]: Started kubelet.service. Jul 14 22:46:51.161000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:51.195904 kubelet[1611]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:46:51.195904 kubelet[1611]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 22:46:51.195904 kubelet[1611]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:46:51.196232 kubelet[1611]: I0714 22:46:51.195955 1611 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 22:46:51.518948 kubelet[1611]: I0714 22:46:51.518912 1611 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 14 22:46:51.518948 kubelet[1611]: I0714 22:46:51.518938 1611 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 22:46:51.519194 kubelet[1611]: I0714 22:46:51.519176 1611 server.go:954] "Client rotation is on, will bootstrap in background" Jul 14 22:46:51.535162 kubelet[1611]: E0714 22:46:51.535129 1611 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://10.0.0.3:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:51.536106 kubelet[1611]: I0714 22:46:51.536085 1611 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:46:51.540644 kubelet[1611]: E0714 22:46:51.540624 1611 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 22:46:51.540689 kubelet[1611]: I0714 22:46:51.540646 1611 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 22:46:51.544086 kubelet[1611]: I0714 22:46:51.544069 1611 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 22:46:51.545082 kubelet[1611]: I0714 22:46:51.545051 1611 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 22:46:51.545231 kubelet[1611]: I0714 22:46:51.545076 1611 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 22:46:51.545231 kubelet[1611]: I0714 22:46:51.545229 1611 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 22:46:51.545335 kubelet[1611]: I0714 22:46:51.545237 1611 container_manager_linux.go:304] "Creating device plugin manager" Jul 14 22:46:51.545335 kubelet[1611]: I0714 22:46:51.545327 1611 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:46:51.547569 kubelet[1611]: I0714 22:46:51.547556 1611 kubelet.go:446] "Attempting to sync node with API server" Jul 14 22:46:51.547623 kubelet[1611]: I0714 22:46:51.547576 1611 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 22:46:51.547623 kubelet[1611]: I0714 22:46:51.547592 1611 kubelet.go:352] "Adding apiserver pod source" Jul 14 22:46:51.547623 kubelet[1611]: I0714 22:46:51.547604 1611 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 22:46:51.571849 kubelet[1611]: W0714 22:46:51.571804 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.3:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:51.571913 kubelet[1611]: E0714 22:46:51.571860 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.3:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:51.572146 kubelet[1611]: W0714 22:46:51.571977 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.3:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:51.572146 kubelet[1611]: E0714 22:46:51.572025 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.3:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:51.572247 kubelet[1611]: I0714 22:46:51.572227 1611 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 22:46:51.572725 kubelet[1611]: I0714 22:46:51.572708 1611 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 22:46:51.573244 kubelet[1611]: W0714 22:46:51.573228 1611 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 22:46:51.582225 kubelet[1611]: I0714 22:46:51.582209 1611 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 22:46:51.582291 kubelet[1611]: I0714 22:46:51.582238 1611 server.go:1287] "Started kubelet" Jul 14 22:46:51.582411 kubelet[1611]: I0714 22:46:51.582390 1611 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 22:46:51.582597 kubelet[1611]: I0714 22:46:51.582563 1611 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 22:46:51.582817 kubelet[1611]: I0714 22:46:51.582803 1611 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 22:46:51.583787 kubelet[1611]: I0714 22:46:51.583773 1611 server.go:479] "Adding debug handlers to kubelet server" Jul 14 22:46:51.583000 audit[1611]: AVC avc: denied { mac_admin } for pid=1611 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.583000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:46:51.583000 audit[1611]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000b09290 a1=c0002cbb18 a2=c000b09260 a3=25 items=0 ppid=1 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:46:51.583000 audit[1611]: AVC avc: denied { mac_admin } for pid=1611 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:51.583000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:46:51.583000 audit[1611]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00093e160 a1=c0002cbb30 a2=c000b09320 a3=25 items=0 ppid=1 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.583000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:46:51.584694 kubelet[1611]: I0714 22:46:51.584390 1611 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 22:46:51.584694 kubelet[1611]: I0714 22:46:51.584440 1611 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 22:46:51.584694 kubelet[1611]: I0714 22:46:51.584533 1611 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 22:46:51.585038 kubelet[1611]: I0714 22:46:51.585009 1611 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 22:46:51.585600 kubelet[1611]: I0714 22:46:51.585583 1611 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 22:46:51.586395 kubelet[1611]: E0714 22:46:51.586380 1611 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:51.587472 kubelet[1611]: I0714 22:46:51.587459 1611 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 22:46:51.587537 kubelet[1611]: I0714 22:46:51.587504 1611 reconciler.go:26] "Reconciler: start to sync state" Jul 14 22:46:51.589172 kubelet[1611]: W0714 22:46:51.589128 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.3:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:51.589223 kubelet[1611]: E0714 22:46:51.589179 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.3:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:51.589252 kubelet[1611]: E0714 22:46:51.589223 1611 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="200ms" Jul 14 22:46:51.589285 kubelet[1611]: I0714 22:46:51.589271 1611 factory.go:221] Registration of the systemd container factory successfully Jul 14 22:46:51.589359 kubelet[1611]: I0714 22:46:51.589346 1611 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 22:46:51.588000 audit[1624]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1624 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.588000 audit[1624]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff788cdad0 a2=0 a3=7fff788cdabc items=0 ppid=1611 pid=1624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.588000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 22:46:51.590600 kubelet[1611]: E0714 22:46:51.587598 1611 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://10.0.0.3:6443/api/v1/namespaces/default/events\": dial tcp 10.0.0.3:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18523fabad6ecacb default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 22:46:51.582221003 +0000 UTC m=+0.416787027,LastTimestamp:2025-07-14 22:46:51.582221003 +0000 UTC m=+0.416787027,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 22:46:51.590000 audit[1625]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1625 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.590000 audit[1625]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffff2386950 a2=0 a3=7ffff238693c items=0 ppid=1611 pid=1625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.590000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 22:46:51.593471 kubelet[1611]: I0714 22:46:51.593452 1611 factory.go:221] Registration of the containerd container factory successfully Jul 14 22:46:51.594603 kubelet[1611]: E0714 22:46:51.594580 1611 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 22:46:51.594000 audit[1627]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1627 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.594000 audit[1627]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffc3fb98d0 a2=0 a3=7fffc3fb98bc items=0 ppid=1611 pid=1627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.594000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:46:51.595000 audit[1629]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1629 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.595000 audit[1629]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc0b2e5b80 a2=0 a3=7ffc0b2e5b6c items=0 ppid=1611 pid=1629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.595000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:46:51.600000 audit[1632]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1632 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.600000 audit[1632]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffea653a1b0 a2=0 a3=7ffea653a19c items=0 ppid=1611 pid=1632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.600000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 22:46:51.601518 kubelet[1611]: I0714 22:46:51.601477 1611 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 22:46:51.601000 audit[1634]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1634 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:46:51.601000 audit[1634]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcd8ebc0b0 a2=0 a3=7ffcd8ebc09c items=0 ppid=1611 pid=1634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.601000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 22:46:51.602254 kubelet[1611]: I0714 22:46:51.602229 1611 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 22:46:51.602254 kubelet[1611]: I0714 22:46:51.602248 1611 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 14 22:46:51.602320 kubelet[1611]: I0714 22:46:51.602263 1611 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 22:46:51.602320 kubelet[1611]: I0714 22:46:51.602269 1611 kubelet.go:2382] "Starting kubelet main sync loop" Jul 14 22:46:51.602320 kubelet[1611]: E0714 22:46:51.602301 1611 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 22:46:51.602000 audit[1636]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1636 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.602000 audit[1636]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7a2940b0 a2=0 a3=7ffc7a29409c items=0 ppid=1611 pid=1636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.602000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 22:46:51.603000 audit[1638]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1638 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.603000 audit[1638]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd89d64730 a2=0 a3=7ffd89d6471c items=0 ppid=1611 pid=1638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.603000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 22:46:51.604000 audit[1639]: NETFILTER_CFG table=mangle:34 family=10 entries=1 op=nft_register_chain pid=1639 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:46:51.604000 audit[1639]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc6f975560 a2=0 a3=7ffc6f97554c items=0 ppid=1611 pid=1639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.604000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 22:46:51.604000 audit[1640]: NETFILTER_CFG table=filter:35 family=2 entries=1 op=nft_register_chain pid=1640 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:46:51.604000 audit[1640]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffe6865e60 a2=0 a3=10e3 items=0 ppid=1611 pid=1640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.604000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 22:46:51.604000 audit[1641]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1641 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:46:51.604000 audit[1641]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdda96c000 a2=0 a3=7ffdda96bfec items=0 ppid=1611 pid=1641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.604000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 22:46:51.605000 audit[1642]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1642 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:46:51.605000 audit[1642]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc066f4320 a2=0 a3=7ffc066f430c items=0 ppid=1611 pid=1642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:51.605000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 22:46:51.606369 kubelet[1611]: W0714 22:46:51.606224 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.3:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:51.606369 kubelet[1611]: E0714 22:46:51.606262 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.3:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:51.606860 kubelet[1611]: I0714 22:46:51.606845 1611 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 22:46:51.606860 kubelet[1611]: I0714 22:46:51.606855 1611 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 22:46:51.606934 kubelet[1611]: I0714 22:46:51.606879 1611 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:46:51.687433 kubelet[1611]: E0714 22:46:51.687414 1611 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:51.702667 kubelet[1611]: E0714 22:46:51.702648 1611 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 14 22:46:51.788003 kubelet[1611]: E0714 22:46:51.787945 1611 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:51.790561 kubelet[1611]: E0714 22:46:51.790317 1611 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="400ms" Jul 14 22:46:51.888658 kubelet[1611]: E0714 22:46:51.888627 1611 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:51.902868 kubelet[1611]: E0714 22:46:51.902843 1611 kubelet.go:2406] "Skipping pod synchronization" err="container runtime status check may not have completed yet" Jul 14 22:46:51.989248 kubelet[1611]: E0714 22:46:51.989215 1611 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:52.015350 kubelet[1611]: I0714 22:46:52.015307 1611 policy_none.go:49] "None policy: Start" Jul 14 22:46:52.015350 kubelet[1611]: I0714 22:46:52.015337 1611 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 22:46:52.015350 kubelet[1611]: I0714 22:46:52.015348 1611 state_mem.go:35] "Initializing new in-memory state store" Jul 14 22:46:52.020858 systemd[1]: Created slice kubepods.slice. Jul 14 22:46:52.024644 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 22:46:52.027012 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 22:46:52.034043 kubelet[1611]: I0714 22:46:52.034023 1611 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 22:46:52.033000 audit[1611]: AVC avc: denied { mac_admin } for pid=1611 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:52.033000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:46:52.033000 audit[1611]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000f231d0 a1=c000f1b818 a2=c000f231a0 a3=25 items=0 ppid=1 pid=1611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:52.033000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:46:52.034237 kubelet[1611]: I0714 22:46:52.034072 1611 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 22:46:52.034237 kubelet[1611]: I0714 22:46:52.034202 1611 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 22:46:52.034237 kubelet[1611]: I0714 22:46:52.034215 1611 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 22:46:52.034733 kubelet[1611]: I0714 22:46:52.034534 1611 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 22:46:52.035656 kubelet[1611]: E0714 22:46:52.035639 1611 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 22:46:52.035698 kubelet[1611]: E0714 22:46:52.035677 1611 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 22:46:52.136767 kubelet[1611]: I0714 22:46:52.136745 1611 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:46:52.137131 kubelet[1611]: E0714 22:46:52.137104 1611 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.3:6443/api/v1/nodes\": dial tcp 10.0.0.3:6443: connect: connection refused" node="localhost" Jul 14 22:46:52.191897 kubelet[1611]: E0714 22:46:52.191864 1611 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="800ms" Jul 14 22:46:52.309506 systemd[1]: Created slice kubepods-burstable-podfa1a6938896962b23a30bf0409af4a50.slice. Jul 14 22:46:52.324385 kubelet[1611]: E0714 22:46:52.324357 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:52.326356 systemd[1]: Created slice kubepods-burstable-podd1af03769b64da1b1e8089a7035018fc.slice. Jul 14 22:46:52.333305 kubelet[1611]: E0714 22:46:52.333277 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:52.334933 systemd[1]: Created slice kubepods-burstable-pod8a75e163f27396b2168da0f88f85f8a5.slice. Jul 14 22:46:52.336029 kubelet[1611]: E0714 22:46:52.336005 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:52.338771 kubelet[1611]: I0714 22:46:52.338738 1611 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:46:52.339073 kubelet[1611]: E0714 22:46:52.339049 1611 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.3:6443/api/v1/nodes\": dial tcp 10.0.0.3:6443: connect: connection refused" node="localhost" Jul 14 22:46:52.392591 kubelet[1611]: I0714 22:46:52.392516 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fa1a6938896962b23a30bf0409af4a50-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"fa1a6938896962b23a30bf0409af4a50\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:52.392591 kubelet[1611]: I0714 22:46:52.392548 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:52.392591 kubelet[1611]: I0714 22:46:52.392565 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:52.392591 kubelet[1611]: I0714 22:46:52.392577 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:52.392591 kubelet[1611]: I0714 22:46:52.392589 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fa1a6938896962b23a30bf0409af4a50-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa1a6938896962b23a30bf0409af4a50\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:52.392761 kubelet[1611]: I0714 22:46:52.392601 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:52.392761 kubelet[1611]: I0714 22:46:52.392614 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:52.392761 kubelet[1611]: I0714 22:46:52.392633 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:52.392761 kubelet[1611]: I0714 22:46:52.392645 1611 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fa1a6938896962b23a30bf0409af4a50-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa1a6938896962b23a30bf0409af4a50\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:52.625578 kubelet[1611]: E0714 22:46:52.625536 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:52.626044 env[1204]: time="2025-07-14T22:46:52.625999375Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:fa1a6938896962b23a30bf0409af4a50,Namespace:kube-system,Attempt:0,}" Jul 14 22:46:52.634214 kubelet[1611]: E0714 22:46:52.634189 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:52.634506 env[1204]: time="2025-07-14T22:46:52.634471317Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,}" Jul 14 22:46:52.636684 kubelet[1611]: E0714 22:46:52.636662 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:52.636924 env[1204]: time="2025-07-14T22:46:52.636898287Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,}" Jul 14 22:46:52.740589 kubelet[1611]: I0714 22:46:52.740474 1611 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:46:52.740823 kubelet[1611]: E0714 22:46:52.740800 1611 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://10.0.0.3:6443/api/v1/nodes\": dial tcp 10.0.0.3:6443: connect: connection refused" node="localhost" Jul 14 22:46:52.842779 kubelet[1611]: W0714 22:46:52.842744 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://10.0.0.3:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:52.842779 kubelet[1611]: E0714 22:46:52.842776 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://10.0.0.3:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:52.953859 kubelet[1611]: W0714 22:46:52.953829 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://10.0.0.3:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:52.953930 kubelet[1611]: E0714 22:46:52.953862 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://10.0.0.3:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:52.992826 kubelet[1611]: E0714 22:46:52.992738 1611 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://10.0.0.3:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 10.0.0.3:6443: connect: connection refused" interval="1.6s" Jul 14 22:46:53.026260 kubelet[1611]: W0714 22:46:53.026238 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://10.0.0.3:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:53.026415 kubelet[1611]: E0714 22:46:53.026269 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://10.0.0.3:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:53.050007 kubelet[1611]: W0714 22:46:53.049964 1611 reflector.go:569] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://10.0.0.3:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 10.0.0.3:6443: connect: connection refused Jul 14 22:46:53.050055 kubelet[1611]: E0714 22:46:53.050007 1611 reflector.go:166] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://10.0.0.3:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 10.0.0.3:6443: connect: connection refused" logger="UnhandledError" Jul 14 22:46:53.260707 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1150000601.mount: Deactivated successfully. Jul 14 22:46:53.265522 env[1204]: time="2025-07-14T22:46:53.265489060Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.268239 env[1204]: time="2025-07-14T22:46:53.268211954Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.269815 env[1204]: time="2025-07-14T22:46:53.269793780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.270784 env[1204]: time="2025-07-14T22:46:53.270759660Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.272278 env[1204]: time="2025-07-14T22:46:53.272253651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.273438 env[1204]: time="2025-07-14T22:46:53.273410109Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.276560 env[1204]: time="2025-07-14T22:46:53.276518426Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.278252 env[1204]: time="2025-07-14T22:46:53.278221368Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.280262 env[1204]: time="2025-07-14T22:46:53.280235053Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.281606 env[1204]: time="2025-07-14T22:46:53.281587629Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.283131 env[1204]: time="2025-07-14T22:46:53.283101517Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.283736 env[1204]: time="2025-07-14T22:46:53.283704417Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:46:53.304059 env[1204]: time="2025-07-14T22:46:53.302820573Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:46:53.304059 env[1204]: time="2025-07-14T22:46:53.302857763Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:46:53.304059 env[1204]: time="2025-07-14T22:46:53.302870086Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:46:53.305091 env[1204]: time="2025-07-14T22:46:53.304360219Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cd9c6639b813cb1dc3bf46257245bd5a913ff1ee41ade8f8361025d8abf96647 pid=1652 runtime=io.containerd.runc.v2 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310084430Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310108495Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310117953Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310252726Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d5774c0b4472fe04c38b60953b74c7a837da39b17af787611148e04d1905c745 pid=1676 runtime=io.containerd.runc.v2 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310019719Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310062028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310074722Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:46:53.311077 env[1204]: time="2025-07-14T22:46:53.310190840Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e255738635496c50a50e0e4b6b64f92c982b492127bff9371aef7a14eb565b1c pid=1667 runtime=io.containerd.runc.v2 Jul 14 22:46:53.315396 systemd[1]: Started cri-containerd-cd9c6639b813cb1dc3bf46257245bd5a913ff1ee41ade8f8361025d8abf96647.scope. Jul 14 22:46:53.324704 systemd[1]: Started cri-containerd-d5774c0b4472fe04c38b60953b74c7a837da39b17af787611148e04d1905c745.scope. Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.327000 audit: BPF prog-id=55 op=LOAD Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1652 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364396336363339623831336362316463336266343632353732343562 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1652 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364396336363339623831336362316463336266343632353732343562 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit: BPF prog-id=56 op=LOAD Jul 14 22:46:53.328000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a05f0 items=0 ppid=1652 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364396336363339623831336362316463336266343632353732343562 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.328000 audit: BPF prog-id=57 op=LOAD Jul 14 22:46:53.328000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a0638 items=0 ppid=1652 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.328000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364396336363339623831336362316463336266343632353732343562 Jul 14 22:46:53.328000 audit: BPF prog-id=57 op=UNLOAD Jul 14 22:46:53.329000 audit: BPF prog-id=56 op=UNLOAD Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { perfmon } for pid=1673 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit[1673]: AVC avc: denied { bpf } for pid=1673 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.329000 audit: BPF prog-id=58 op=LOAD Jul 14 22:46:53.329000 audit[1673]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a0a48 items=0 ppid=1652 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.329000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6364396336363339623831336362316463336266343632353732343562 Jul 14 22:46:53.333395 systemd[1]: Started cri-containerd-e255738635496c50a50e0e4b6b64f92c982b492127bff9371aef7a14eb565b1c.scope. Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.334000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit: BPF prog-id=59 op=LOAD Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=1676 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435373734633062343437326665303463333862363039353362373463 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=1676 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435373734633062343437326665303463333862363039353362373463 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit: BPF prog-id=60 op=LOAD Jul 14 22:46:53.335000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0000247f0 items=0 ppid=1676 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435373734633062343437326665303463333862363039353362373463 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.335000 audit: BPF prog-id=61 op=LOAD Jul 14 22:46:53.335000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c000024838 items=0 ppid=1676 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.335000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435373734633062343437326665303463333862363039353362373463 Jul 14 22:46:53.335000 audit: BPF prog-id=61 op=UNLOAD Jul 14 22:46:53.335000 audit: BPF prog-id=60 op=UNLOAD Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { perfmon } for pid=1698 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit[1698]: AVC avc: denied { bpf } for pid=1698 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.336000 audit: BPF prog-id=62 op=LOAD Jul 14 22:46:53.336000 audit[1698]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000024c48 items=0 ppid=1676 pid=1698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.336000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435373734633062343437326665303463333862363039353362373463 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.345000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit: BPF prog-id=63 op=LOAD Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1667 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532353537333836333534393663353061353065306534623662363466 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=1667 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532353537333836333534393663353061353065306534623662363466 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit: BPF prog-id=64 op=LOAD Jul 14 22:46:53.346000 audit[1702]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00028b1c0 items=0 ppid=1667 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532353537333836333534393663353061353065306534623662363466 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit: BPF prog-id=65 op=LOAD Jul 14 22:46:53.346000 audit[1702]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00028b208 items=0 ppid=1667 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532353537333836333534393663353061353065306534623662363466 Jul 14 22:46:53.346000 audit: BPF prog-id=65 op=UNLOAD Jul 14 22:46:53.346000 audit: BPF prog-id=64 op=UNLOAD Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { perfmon } for pid=1702 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit[1702]: AVC avc: denied { bpf } for pid=1702 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.346000 audit: BPF prog-id=66 op=LOAD Jul 14 22:46:53.346000 audit[1702]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00028b618 items=0 ppid=1667 pid=1702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.346000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6532353537333836333534393663353061353065306534623662363466 Jul 14 22:46:53.349677 env[1204]: time="2025-07-14T22:46:53.349638189Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:8a75e163f27396b2168da0f88f85f8a5,Namespace:kube-system,Attempt:0,} returns sandbox id \"cd9c6639b813cb1dc3bf46257245bd5a913ff1ee41ade8f8361025d8abf96647\"" Jul 14 22:46:53.350567 kubelet[1611]: E0714 22:46:53.350546 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:53.352400 env[1204]: time="2025-07-14T22:46:53.352359130Z" level=info msg="CreateContainer within sandbox \"cd9c6639b813cb1dc3bf46257245bd5a913ff1ee41ade8f8361025d8abf96647\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 22:46:53.361116 env[1204]: time="2025-07-14T22:46:53.361052948Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:d1af03769b64da1b1e8089a7035018fc,Namespace:kube-system,Attempt:0,} returns sandbox id \"d5774c0b4472fe04c38b60953b74c7a837da39b17af787611148e04d1905c745\"" Jul 14 22:46:53.361967 kubelet[1611]: E0714 22:46:53.361947 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:53.364652 env[1204]: time="2025-07-14T22:46:53.364621528Z" level=info msg="CreateContainer within sandbox \"d5774c0b4472fe04c38b60953b74c7a837da39b17af787611148e04d1905c745\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 22:46:53.373451 env[1204]: time="2025-07-14T22:46:53.373401176Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:fa1a6938896962b23a30bf0409af4a50,Namespace:kube-system,Attempt:0,} returns sandbox id \"e255738635496c50a50e0e4b6b64f92c982b492127bff9371aef7a14eb565b1c\"" Jul 14 22:46:53.374112 kubelet[1611]: E0714 22:46:53.374086 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:53.375701 env[1204]: time="2025-07-14T22:46:53.375674528Z" level=info msg="CreateContainer within sandbox \"e255738635496c50a50e0e4b6b64f92c982b492127bff9371aef7a14eb565b1c\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 22:46:53.381136 env[1204]: time="2025-07-14T22:46:53.381094919Z" level=info msg="CreateContainer within sandbox \"cd9c6639b813cb1dc3bf46257245bd5a913ff1ee41ade8f8361025d8abf96647\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"8ca2b9d3d708efc2d61d1aad5031c9014d396a84db594c388f84b4cb922206c7\"" Jul 14 22:46:53.381696 env[1204]: time="2025-07-14T22:46:53.381650872Z" level=info msg="StartContainer for \"8ca2b9d3d708efc2d61d1aad5031c9014d396a84db594c388f84b4cb922206c7\"" Jul 14 22:46:53.382896 env[1204]: time="2025-07-14T22:46:53.382867362Z" level=info msg="CreateContainer within sandbox \"d5774c0b4472fe04c38b60953b74c7a837da39b17af787611148e04d1905c745\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"96457964e2e4e10a6a8a9d982423455ede2fbc2d46f6f40444dea40bedf1cfeb\"" Jul 14 22:46:53.383174 env[1204]: time="2025-07-14T22:46:53.383146055Z" level=info msg="StartContainer for \"96457964e2e4e10a6a8a9d982423455ede2fbc2d46f6f40444dea40bedf1cfeb\"" Jul 14 22:46:53.391356 env[1204]: time="2025-07-14T22:46:53.391306513Z" level=info msg="CreateContainer within sandbox \"e255738635496c50a50e0e4b6b64f92c982b492127bff9371aef7a14eb565b1c\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"aa8e8cf0481d0815f88515c140d01a4e7288488514a2f5b4269b1caa987bbe47\"" Jul 14 22:46:53.391791 env[1204]: time="2025-07-14T22:46:53.391759452Z" level=info msg="StartContainer for \"aa8e8cf0481d0815f88515c140d01a4e7288488514a2f5b4269b1caa987bbe47\"" Jul 14 22:46:53.396895 systemd[1]: Started cri-containerd-8ca2b9d3d708efc2d61d1aad5031c9014d396a84db594c388f84b4cb922206c7.scope. Jul 14 22:46:53.397577 systemd[1]: Started cri-containerd-96457964e2e4e10a6a8a9d982423455ede2fbc2d46f6f40444dea40bedf1cfeb.scope. Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit: BPF prog-id=67 op=LOAD Jul 14 22:46:53.407000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1785]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00019fc48 a2=10 a3=1c items=0 ppid=1652 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613262396433643730386566633264363164316161643530333163 Jul 14 22:46:53.407000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.407000 audit[1785]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00019f6b0 a2=3c a3=8 items=0 ppid=1652 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.407000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613262396433643730386566633264363164316161643530333163 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit: BPF prog-id=68 op=LOAD Jul 14 22:46:53.408000 audit[1785]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019f9d8 a2=78 a3=c000275360 items=0 ppid=1652 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613262396433643730386566633264363164316161643530333163 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit: BPF prog-id=69 op=LOAD Jul 14 22:46:53.408000 audit[1785]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00019f770 a2=78 a3=c0002753a8 items=0 ppid=1652 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613262396433643730386566633264363164316161643530333163 Jul 14 22:46:53.408000 audit: BPF prog-id=69 op=UNLOAD Jul 14 22:46:53.408000 audit: BPF prog-id=68 op=UNLOAD Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { perfmon } for pid=1785 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit[1785]: AVC avc: denied { bpf } for pid=1785 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.408000 audit: BPF prog-id=70 op=LOAD Jul 14 22:46:53.408000 audit[1785]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00019fc30 a2=78 a3=c0002757b8 items=0 ppid=1652 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.408000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3863613262396433643730386566633264363164316161643530333163 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit: BPF prog-id=71 op=LOAD Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1676 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343537393634653265346531306136613861396439383234323334 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1676 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343537393634653265346531306136613861396439383234323334 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.409000 audit: BPF prog-id=72 op=LOAD Jul 14 22:46:53.409000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003891d0 items=0 ppid=1676 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.409000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343537393634653265346531306136613861396439383234323334 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit: BPF prog-id=73 op=LOAD Jul 14 22:46:53.410000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000389218 items=0 ppid=1676 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343537393634653265346531306136613861396439383234323334 Jul 14 22:46:53.410000 audit: BPF prog-id=73 op=UNLOAD Jul 14 22:46:53.410000 audit: BPF prog-id=72 op=UNLOAD Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { perfmon } for pid=1786 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit[1786]: AVC avc: denied { bpf } for pid=1786 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.410000 audit: BPF prog-id=74 op=LOAD Jul 14 22:46:53.410000 audit[1786]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000389628 items=0 ppid=1676 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.410000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3936343537393634653265346531306136613861396439383234323334 Jul 14 22:46:53.411648 systemd[1]: Started cri-containerd-aa8e8cf0481d0815f88515c140d01a4e7288488514a2f5b4269b1caa987bbe47.scope. Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.424000 audit: BPF prog-id=75 op=LOAD Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1667 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386538636630343831643038313566383835313563313430643031 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1667 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386538636630343831643038313566383835313563313430643031 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit: BPF prog-id=76 op=LOAD Jul 14 22:46:53.425000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00040a140 items=0 ppid=1667 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386538636630343831643038313566383835313563313430643031 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit: BPF prog-id=77 op=LOAD Jul 14 22:46:53.425000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00040a188 items=0 ppid=1667 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386538636630343831643038313566383835313563313430643031 Jul 14 22:46:53.425000 audit: BPF prog-id=77 op=UNLOAD Jul 14 22:46:53.425000 audit: BPF prog-id=76 op=UNLOAD Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:53.425000 audit: BPF prog-id=78 op=LOAD Jul 14 22:46:53.425000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00040a598 items=0 ppid=1667 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:53.425000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6161386538636630343831643038313566383835313563313430643031 Jul 14 22:46:53.440413 env[1204]: time="2025-07-14T22:46:53.440364669Z" level=info msg="StartContainer for \"96457964e2e4e10a6a8a9d982423455ede2fbc2d46f6f40444dea40bedf1cfeb\" returns successfully" Jul 14 22:46:53.445782 env[1204]: time="2025-07-14T22:46:53.445738824Z" level=info msg="StartContainer for \"8ca2b9d3d708efc2d61d1aad5031c9014d396a84db594c388f84b4cb922206c7\" returns successfully" Jul 14 22:46:53.461057 env[1204]: time="2025-07-14T22:46:53.461018418Z" level=info msg="StartContainer for \"aa8e8cf0481d0815f88515c140d01a4e7288488514a2f5b4269b1caa987bbe47\" returns successfully" Jul 14 22:46:53.542969 kubelet[1611]: I0714 22:46:53.542855 1611 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:46:53.611293 kubelet[1611]: E0714 22:46:53.611258 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:53.611422 kubelet[1611]: E0714 22:46:53.611399 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:53.612869 kubelet[1611]: E0714 22:46:53.612847 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:53.612968 kubelet[1611]: E0714 22:46:53.612933 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:53.614207 kubelet[1611]: E0714 22:46:53.614185 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:53.614297 kubelet[1611]: E0714 22:46:53.614268 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:54.282000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.282000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0005ef020 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:46:54.286000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.286000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000e266e0 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:46:54.286000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:46:54.282000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:46:54.442000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.442000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=3f a1=c005eda000 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:46:54.442000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:46:54.448000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.448000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.448000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003e30b70 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:46:54.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:46:54.448000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c005b444c0 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:46:54.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:46:54.455000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.455000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c003e318c0 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:46:54.455000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:46:54.483000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.483000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c004202860 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:46:54.483000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:46:54.483000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:46:54.483000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=40 a1=c003e31f80 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:46:54.483000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:46:54.577971 kubelet[1611]: I0714 22:46:54.577840 1611 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 22:46:54.577971 kubelet[1611]: E0714 22:46:54.577892 1611 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 14 22:46:54.585740 kubelet[1611]: E0714 22:46:54.585714 1611 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:54.616325 kubelet[1611]: E0714 22:46:54.616296 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:54.616467 kubelet[1611]: E0714 22:46:54.616411 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:54.616467 kubelet[1611]: E0714 22:46:54.616416 1611 kubelet.go:3190] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 14 22:46:54.616564 kubelet[1611]: E0714 22:46:54.616550 1611 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:54.686118 kubelet[1611]: I0714 22:46:54.686078 1611 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:54.689940 kubelet[1611]: E0714 22:46:54.689916 1611 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:54.689940 kubelet[1611]: I0714 22:46:54.689935 1611 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:54.691254 kubelet[1611]: E0714 22:46:54.691207 1611 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:54.691254 kubelet[1611]: I0714 22:46:54.691230 1611 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:54.692685 kubelet[1611]: E0714 22:46:54.692660 1611 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:55.567873 kubelet[1611]: I0714 22:46:55.567833 1611 apiserver.go:52] "Watching apiserver" Jul 14 22:46:55.588012 kubelet[1611]: I0714 22:46:55.587975 1611 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 22:46:56.596808 systemd[1]: Reloading. Jul 14 22:46:56.667747 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-07-14T22:46:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 22:46:56.667783 /usr/lib/systemd/system-generators/torcx-generator[1904]: time="2025-07-14T22:46:56Z" level=info msg="torcx already run" Jul 14 22:46:56.718129 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 22:46:56.718147 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 22:46:56.735599 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.804802 kernel: kauditd_printk_skb: 589 callbacks suppressed Jul 14 22:46:56.804857 kernel: audit: type=1400 audit(1752533216.803:553): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.810185 kernel: audit: type=1400 audit(1752533216.803:554): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.810234 kernel: audit: type=1400 audit(1752533216.803:555): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.812891 kernel: audit: type=1400 audit(1752533216.803:556): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818402 kernel: audit: type=1400 audit(1752533216.803:557): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818449 kernel: audit: type=1400 audit(1752533216.803:558): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.823876 kernel: audit: type=1400 audit(1752533216.803:559): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.823914 kernel: audit: type=1400 audit(1752533216.803:560): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.826597 kernel: audit: type=1400 audit(1752533216.803:561): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.803000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829301 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 14 22:46:56.806000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.806000 audit: BPF prog-id=79 op=LOAD Jul 14 22:46:56.806000 audit: BPF prog-id=59 op=UNLOAD Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.807000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit: BPF prog-id=80 op=LOAD Jul 14 22:46:56.809000 audit: BPF prog-id=40 op=UNLOAD Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.809000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit: BPF prog-id=81 op=LOAD Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.817000 audit: BPF prog-id=82 op=LOAD Jul 14 22:46:56.817000 audit: BPF prog-id=41 op=UNLOAD Jul 14 22:46:56.817000 audit: BPF prog-id=42 op=UNLOAD Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit: BPF prog-id=83 op=LOAD Jul 14 22:46:56.820000 audit: BPF prog-id=55 op=UNLOAD Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.826000 audit: BPF prog-id=84 op=LOAD Jul 14 22:46:56.826000 audit: BPF prog-id=63 op=UNLOAD Jul 14 22:46:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit: BPF prog-id=85 op=LOAD Jul 14 22:46:56.829000 audit: BPF prog-id=43 op=UNLOAD Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit: BPF prog-id=86 op=LOAD Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit: BPF prog-id=87 op=LOAD Jul 14 22:46:56.830000 audit: BPF prog-id=44 op=UNLOAD Jul 14 22:46:56.830000 audit: BPF prog-id=45 op=UNLOAD Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.830000 audit: BPF prog-id=88 op=LOAD Jul 14 22:46:56.830000 audit: BPF prog-id=46 op=UNLOAD Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.831000 audit: BPF prog-id=89 op=LOAD Jul 14 22:46:56.831000 audit: BPF prog-id=71 op=UNLOAD Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.832000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit: BPF prog-id=90 op=LOAD Jul 14 22:46:56.833000 audit: BPF prog-id=47 op=UNLOAD Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit: BPF prog-id=91 op=LOAD Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.833000 audit: BPF prog-id=92 op=LOAD Jul 14 22:46:56.833000 audit: BPF prog-id=48 op=UNLOAD Jul 14 22:46:56.833000 audit: BPF prog-id=49 op=UNLOAD Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.834000 audit: BPF prog-id=93 op=LOAD Jul 14 22:46:56.834000 audit: BPF prog-id=75 op=UNLOAD Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit: BPF prog-id=94 op=LOAD Jul 14 22:46:56.835000 audit: BPF prog-id=50 op=UNLOAD Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.835000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit: BPF prog-id=95 op=LOAD Jul 14 22:46:56.836000 audit: BPF prog-id=51 op=UNLOAD Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit: BPF prog-id=96 op=LOAD Jul 14 22:46:56.836000 audit: BPF prog-id=52 op=UNLOAD Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit: BPF prog-id=97 op=LOAD Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.836000 audit: BPF prog-id=98 op=LOAD Jul 14 22:46:56.837000 audit: BPF prog-id=53 op=UNLOAD Jul 14 22:46:56.837000 audit: BPF prog-id=54 op=UNLOAD Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:56.838000 audit: BPF prog-id=99 op=LOAD Jul 14 22:46:56.838000 audit: BPF prog-id=67 op=UNLOAD Jul 14 22:46:56.847958 systemd[1]: Stopping kubelet.service... Jul 14 22:46:56.873737 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 22:46:56.873871 systemd[1]: Stopped kubelet.service. Jul 14 22:46:56.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:56.875317 systemd[1]: Starting kubelet.service... Jul 14 22:46:56.955119 systemd[1]: Started kubelet.service. Jul 14 22:46:56.954000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:46:56.983351 kubelet[1950]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:46:56.983351 kubelet[1950]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 14 22:46:56.983351 kubelet[1950]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 22:46:56.983641 kubelet[1950]: I0714 22:46:56.983375 1950 server.go:215] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 22:46:56.991062 kubelet[1950]: I0714 22:46:56.991022 1950 server.go:520] "Kubelet version" kubeletVersion="v1.32.4" Jul 14 22:46:56.991062 kubelet[1950]: I0714 22:46:56.991049 1950 server.go:522] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 22:46:56.991346 kubelet[1950]: I0714 22:46:56.991322 1950 server.go:954] "Client rotation is on, will bootstrap in background" Jul 14 22:46:56.992514 kubelet[1950]: I0714 22:46:56.992495 1950 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 14 22:46:56.994260 kubelet[1950]: I0714 22:46:56.994232 1950 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 22:46:56.998736 kubelet[1950]: E0714 22:46:56.998033 1950 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 22:46:56.998736 kubelet[1950]: I0714 22:46:56.998102 1950 server.go:1421] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 22:46:57.002565 kubelet[1950]: I0714 22:46:57.002506 1950 server.go:772] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 22:46:57.002770 kubelet[1950]: I0714 22:46:57.002739 1950 container_manager_linux.go:268] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 22:46:57.002944 kubelet[1950]: I0714 22:46:57.002774 1950 container_manager_linux.go:273] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 22:46:57.003028 kubelet[1950]: I0714 22:46:57.002947 1950 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 22:46:57.003028 kubelet[1950]: I0714 22:46:57.002955 1950 container_manager_linux.go:304] "Creating device plugin manager" Jul 14 22:46:57.003181 kubelet[1950]: I0714 22:46:57.003173 1950 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:46:57.003310 kubelet[1950]: I0714 22:46:57.003294 1950 kubelet.go:446] "Attempting to sync node with API server" Jul 14 22:46:57.003333 kubelet[1950]: I0714 22:46:57.003316 1950 kubelet.go:341] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 22:46:57.003333 kubelet[1950]: I0714 22:46:57.003331 1950 kubelet.go:352] "Adding apiserver pod source" Jul 14 22:46:57.004348 kubelet[1950]: I0714 22:46:57.004327 1950 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 22:46:57.005827 kubelet[1950]: I0714 22:46:57.005814 1950 kuberuntime_manager.go:269] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 22:46:57.006330 kubelet[1950]: I0714 22:46:57.006310 1950 kubelet.go:890] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 22:46:57.006917 kubelet[1950]: I0714 22:46:57.006900 1950 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 14 22:46:57.006987 kubelet[1950]: I0714 22:46:57.006973 1950 server.go:1287] "Started kubelet" Jul 14 22:46:57.008000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:57.008000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:46:57.008000 audit[1950]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0007b5740 a1=c000dce3c0 a2=c0007b5710 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:57.008000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:46:57.008000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:57.008000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:46:57.008000 audit[1950]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000115fa0 a1=c000dce3d8 a2=c0007b57d0 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:57.008000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:46:57.009473 kubelet[1950]: I0714 22:46:57.009154 1950 kubelet.go:1507] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 22:46:57.009473 kubelet[1950]: I0714 22:46:57.009186 1950 kubelet.go:1511] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 14 22:46:57.009473 kubelet[1950]: I0714 22:46:57.009210 1950 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 22:46:57.012717 kubelet[1950]: I0714 22:46:57.012692 1950 server.go:169] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 22:46:57.013597 kubelet[1950]: I0714 22:46:57.013583 1950 server.go:479] "Adding debug handlers to kubelet server" Jul 14 22:46:57.014160 kubelet[1950]: E0714 22:46:57.014147 1950 kubelet.go:1555] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 22:46:57.015555 kubelet[1950]: I0714 22:46:57.015490 1950 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 22:46:57.015674 kubelet[1950]: I0714 22:46:57.015660 1950 server.go:243] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 22:46:57.016372 kubelet[1950]: I0714 22:46:57.015959 1950 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 22:46:57.017487 kubelet[1950]: I0714 22:46:57.017464 1950 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 14 22:46:57.017755 kubelet[1950]: I0714 22:46:57.017559 1950 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 14 22:46:57.017755 kubelet[1950]: I0714 22:46:57.017739 1950 reconciler.go:26] "Reconciler: start to sync state" Jul 14 22:46:57.017970 kubelet[1950]: E0714 22:46:57.017795 1950 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 22:46:57.018129 kubelet[1950]: I0714 22:46:57.018105 1950 factory.go:221] Registration of the systemd container factory successfully Jul 14 22:46:57.018230 kubelet[1950]: I0714 22:46:57.018204 1950 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 22:46:57.021009 kubelet[1950]: I0714 22:46:57.020993 1950 factory.go:221] Registration of the containerd container factory successfully Jul 14 22:46:57.025094 kubelet[1950]: I0714 22:46:57.025073 1950 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 22:46:57.027180 kubelet[1950]: I0714 22:46:57.027167 1950 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 22:46:57.027259 kubelet[1950]: I0714 22:46:57.027246 1950 status_manager.go:227] "Starting to sync pod status with apiserver" Jul 14 22:46:57.027350 kubelet[1950]: I0714 22:46:57.027336 1950 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 14 22:46:57.027418 kubelet[1950]: I0714 22:46:57.027404 1950 kubelet.go:2382] "Starting kubelet main sync loop" Jul 14 22:46:57.027697 kubelet[1950]: E0714 22:46:57.027676 1950 kubelet.go:2406] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 22:46:57.043908 kubelet[1950]: I0714 22:46:57.043875 1950 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 14 22:46:57.043908 kubelet[1950]: I0714 22:46:57.043896 1950 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 14 22:46:57.043908 kubelet[1950]: I0714 22:46:57.043913 1950 state_mem.go:36] "Initialized new in-memory state store" Jul 14 22:46:57.044114 kubelet[1950]: I0714 22:46:57.044060 1950 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 22:46:57.044114 kubelet[1950]: I0714 22:46:57.044069 1950 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 22:46:57.044114 kubelet[1950]: I0714 22:46:57.044088 1950 policy_none.go:49] "None policy: Start" Jul 14 22:46:57.044114 kubelet[1950]: I0714 22:46:57.044095 1950 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 14 22:46:57.044114 kubelet[1950]: I0714 22:46:57.044104 1950 state_mem.go:35] "Initializing new in-memory state store" Jul 14 22:46:57.044219 kubelet[1950]: I0714 22:46:57.044206 1950 state_mem.go:75] "Updated machine memory state" Jul 14 22:46:57.047330 kubelet[1950]: I0714 22:46:57.047213 1950 manager.go:519] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 22:46:57.046000 audit[1950]: AVC avc: denied { mac_admin } for pid=1950 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:46:57.046000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 22:46:57.046000 audit[1950]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0011121b0 a1=c000e80888 a2=c001112180 a3=25 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:46:57.046000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 22:46:57.047726 kubelet[1950]: I0714 22:46:57.047446 1950 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 22:46:57.047726 kubelet[1950]: I0714 22:46:57.047569 1950 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 22:46:57.047726 kubelet[1950]: I0714 22:46:57.047580 1950 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 22:46:57.047858 kubelet[1950]: I0714 22:46:57.047833 1950 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 22:46:57.050261 kubelet[1950]: E0714 22:46:57.050239 1950 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 14 22:46:57.128813 kubelet[1950]: I0714 22:46:57.128770 1950 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:57.128950 kubelet[1950]: I0714 22:46:57.128931 1950 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:57.129042 kubelet[1950]: I0714 22:46:57.129009 1950 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:57.150992 kubelet[1950]: I0714 22:46:57.150964 1950 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 14 22:46:57.157280 kubelet[1950]: I0714 22:46:57.156667 1950 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 14 22:46:57.157280 kubelet[1950]: I0714 22:46:57.156722 1950 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 14 22:46:57.219035 kubelet[1950]: I0714 22:46:57.219002 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/fa1a6938896962b23a30bf0409af4a50-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa1a6938896962b23a30bf0409af4a50\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:57.219035 kubelet[1950]: I0714 22:46:57.219032 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/fa1a6938896962b23a30bf0409af4a50-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"fa1a6938896962b23a30bf0409af4a50\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:57.219243 kubelet[1950]: I0714 22:46:57.219052 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:57.219243 kubelet[1950]: I0714 22:46:57.219067 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:57.219243 kubelet[1950]: I0714 22:46:57.219081 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:57.219243 kubelet[1950]: I0714 22:46:57.219105 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:57.219243 kubelet[1950]: I0714 22:46:57.219120 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d1af03769b64da1b1e8089a7035018fc-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"d1af03769b64da1b1e8089a7035018fc\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:57.219377 kubelet[1950]: I0714 22:46:57.219138 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/fa1a6938896962b23a30bf0409af4a50-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"fa1a6938896962b23a30bf0409af4a50\") " pod="kube-system/kube-apiserver-localhost" Jul 14 22:46:57.219377 kubelet[1950]: I0714 22:46:57.219210 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/8a75e163f27396b2168da0f88f85f8a5-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"8a75e163f27396b2168da0f88f85f8a5\") " pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:57.433774 kubelet[1950]: E0714 22:46:57.433663 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:57.433901 kubelet[1950]: E0714 22:46:57.433816 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:57.434244 kubelet[1950]: E0714 22:46:57.434186 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:58.004748 kubelet[1950]: I0714 22:46:58.004712 1950 apiserver.go:52] "Watching apiserver" Jul 14 22:46:58.017687 kubelet[1950]: I0714 22:46:58.017666 1950 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 14 22:46:58.035836 kubelet[1950]: I0714 22:46:58.035822 1950 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:58.035978 kubelet[1950]: E0714 22:46:58.035957 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:58.036057 kubelet[1950]: I0714 22:46:58.035828 1950 kubelet.go:3194] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:58.040142 kubelet[1950]: E0714 22:46:58.040118 1950 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" already exists" pod="kube-system/kube-controller-manager-localhost" Jul 14 22:46:58.040281 kubelet[1950]: E0714 22:46:58.040228 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:58.040481 kubelet[1950]: E0714 22:46:58.040468 1950 kubelet.go:3196] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 14 22:46:58.040564 kubelet[1950]: E0714 22:46:58.040548 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:58.053168 kubelet[1950]: I0714 22:46:58.053104 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.053090062 podStartE2EDuration="1.053090062s" podCreationTimestamp="2025-07-14 22:46:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:46:58.053045706 +0000 UTC m=+1.095386510" watchObservedRunningTime="2025-07-14 22:46:58.053090062 +0000 UTC m=+1.095430866" Jul 14 22:46:58.063982 kubelet[1950]: I0714 22:46:58.063923 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.063895623 podStartE2EDuration="1.063895623s" podCreationTimestamp="2025-07-14 22:46:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:46:58.05892882 +0000 UTC m=+1.101269614" watchObservedRunningTime="2025-07-14 22:46:58.063895623 +0000 UTC m=+1.106236427" Jul 14 22:46:58.069891 kubelet[1950]: I0714 22:46:58.069832 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.069817922 podStartE2EDuration="1.069817922s" podCreationTimestamp="2025-07-14 22:46:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:46:58.064004313 +0000 UTC m=+1.106345117" watchObservedRunningTime="2025-07-14 22:46:58.069817922 +0000 UTC m=+1.112158726" Jul 14 22:46:59.004000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="vda9" ino=7296 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 22:46:59.004000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c50f00 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:46:59.004000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:46:59.037509 kubelet[1950]: E0714 22:46:59.037479 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:59.037766 kubelet[1950]: E0714 22:46:59.037610 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:46:59.038016 kubelet[1950]: E0714 22:46:59.037982 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:00.038252 kubelet[1950]: E0714 22:47:00.038205 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:00.038607 kubelet[1950]: E0714 22:47:00.038273 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:00.951000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:00.951000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001596380 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:47:00.951000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:47:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015963e0 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:47:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:47:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015965a0 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:47:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:47:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000da8200 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:47:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:47:02.961658 kubelet[1950]: I0714 22:47:02.961624 1950 kuberuntime_manager.go:1702] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 22:47:02.962375 env[1204]: time="2025-07-14T22:47:02.962331228Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 22:47:02.962748 kubelet[1950]: I0714 22:47:02.962507 1950 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 22:47:03.603822 kubelet[1950]: E0714 22:47:03.603786 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:03.871705 systemd[1]: Created slice kubepods-besteffort-pod2e4200cd_0e7a_4beb_9c23_146bf404eb60.slice. Jul 14 22:47:03.959264 kubelet[1950]: I0714 22:47:03.959213 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/2e4200cd-0e7a-4beb-9c23-146bf404eb60-xtables-lock\") pod \"kube-proxy-p9nn2\" (UID: \"2e4200cd-0e7a-4beb-9c23-146bf404eb60\") " pod="kube-system/kube-proxy-p9nn2" Jul 14 22:47:03.959264 kubelet[1950]: I0714 22:47:03.959257 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rhbmh\" (UniqueName: \"kubernetes.io/projected/2e4200cd-0e7a-4beb-9c23-146bf404eb60-kube-api-access-rhbmh\") pod \"kube-proxy-p9nn2\" (UID: \"2e4200cd-0e7a-4beb-9c23-146bf404eb60\") " pod="kube-system/kube-proxy-p9nn2" Jul 14 22:47:03.959495 kubelet[1950]: I0714 22:47:03.959281 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/2e4200cd-0e7a-4beb-9c23-146bf404eb60-kube-proxy\") pod \"kube-proxy-p9nn2\" (UID: \"2e4200cd-0e7a-4beb-9c23-146bf404eb60\") " pod="kube-system/kube-proxy-p9nn2" Jul 14 22:47:03.959495 kubelet[1950]: I0714 22:47:03.959336 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/2e4200cd-0e7a-4beb-9c23-146bf404eb60-lib-modules\") pod \"kube-proxy-p9nn2\" (UID: \"2e4200cd-0e7a-4beb-9c23-146bf404eb60\") " pod="kube-system/kube-proxy-p9nn2" Jul 14 22:47:04.030301 systemd[1]: Created slice kubepods-besteffort-pod2efbdcbe_d8ba_4b8b_ab43_accc116478c7.slice. Jul 14 22:47:04.043703 kubelet[1950]: E0714 22:47:04.043658 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:04.059734 kubelet[1950]: I0714 22:47:04.059705 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/2efbdcbe-d8ba-4b8b-ab43-accc116478c7-var-lib-calico\") pod \"tigera-operator-747864d56d-mx7kd\" (UID: \"2efbdcbe-d8ba-4b8b-ab43-accc116478c7\") " pod="tigera-operator/tigera-operator-747864d56d-mx7kd" Jul 14 22:47:04.059734 kubelet[1950]: I0714 22:47:04.059737 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mx64d\" (UniqueName: \"kubernetes.io/projected/2efbdcbe-d8ba-4b8b-ab43-accc116478c7-kube-api-access-mx64d\") pod \"tigera-operator-747864d56d-mx7kd\" (UID: \"2efbdcbe-d8ba-4b8b-ab43-accc116478c7\") " pod="tigera-operator/tigera-operator-747864d56d-mx7kd" Jul 14 22:47:04.063271 kubelet[1950]: I0714 22:47:04.063247 1950 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 22:47:04.178068 kubelet[1950]: E0714 22:47:04.177981 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:04.178644 env[1204]: time="2025-07-14T22:47:04.178600749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-p9nn2,Uid:2e4200cd-0e7a-4beb-9c23-146bf404eb60,Namespace:kube-system,Attempt:0,}" Jul 14 22:47:04.193331 env[1204]: time="2025-07-14T22:47:04.193264714Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:04.193331 env[1204]: time="2025-07-14T22:47:04.193296625Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:04.193331 env[1204]: time="2025-07-14T22:47:04.193305903Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:04.193569 env[1204]: time="2025-07-14T22:47:04.193396336Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/728a6d8a66a0a735a0f43af0e809b10cf9b3f5ce3de8158e41c9b33f2097c823 pid=2007 runtime=io.containerd.runc.v2 Jul 14 22:47:04.204758 systemd[1]: Started cri-containerd-728a6d8a66a0a735a0f43af0e809b10cf9b3f5ce3de8158e41c9b33f2097c823.scope. Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.215220 kernel: kauditd_printk_skb: 265 callbacks suppressed Jul 14 22:47:04.215274 kernel: audit: type=1400 audit(1752533224.210:806): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.215301 kernel: audit: type=1400 audit(1752533224.210:807): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.220824 kernel: audit: type=1400 audit(1752533224.210:808): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.220871 kernel: audit: type=1400 audit(1752533224.210:809): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.226492 kernel: audit: type=1400 audit(1752533224.210:810): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.226565 kernel: audit: type=1400 audit(1752533224.210:811): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.232233 kernel: audit: type=1400 audit(1752533224.210:812): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.232312 kernel: audit: type=1400 audit(1752533224.210:813): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.210000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.238220 kernel: audit: type=1400 audit(1752533224.210:814): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.238305 kernel: audit: type=1400 audit(1752533224.213:815): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.213000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.213000 audit: BPF prog-id=100 op=LOAD Jul 14 22:47:04.213000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.213000 audit[2016]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2007 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.213000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732386136643861363661306137333561306634336166306538303962 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2007 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732386136643861363661306137333561306634336166306538303962 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.214000 audit: BPF prog-id=101 op=LOAD Jul 14 22:47:04.214000 audit[2016]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000282360 items=0 ppid=2007 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.214000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732386136643861363661306137333561306634336166306538303962 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.216000 audit: BPF prog-id=102 op=LOAD Jul 14 22:47:04.216000 audit[2016]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002823a8 items=0 ppid=2007 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732386136643861363661306137333561306634336166306538303962 Jul 14 22:47:04.219000 audit: BPF prog-id=102 op=UNLOAD Jul 14 22:47:04.219000 audit: BPF prog-id=101 op=UNLOAD Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { perfmon } for pid=2016 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit[2016]: AVC avc: denied { bpf } for pid=2016 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.219000 audit: BPF prog-id=103 op=LOAD Jul 14 22:47:04.219000 audit[2016]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0002827b8 items=0 ppid=2007 pid=2016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3732386136643861363661306137333561306634336166306538303962 Jul 14 22:47:04.244390 env[1204]: time="2025-07-14T22:47:04.244353881Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-p9nn2,Uid:2e4200cd-0e7a-4beb-9c23-146bf404eb60,Namespace:kube-system,Attempt:0,} returns sandbox id \"728a6d8a66a0a735a0f43af0e809b10cf9b3f5ce3de8158e41c9b33f2097c823\"" Jul 14 22:47:04.245022 kubelet[1950]: E0714 22:47:04.245004 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:04.246634 env[1204]: time="2025-07-14T22:47:04.246606010Z" level=info msg="CreateContainer within sandbox \"728a6d8a66a0a735a0f43af0e809b10cf9b3f5ce3de8158e41c9b33f2097c823\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 22:47:04.261537 env[1204]: time="2025-07-14T22:47:04.261477454Z" level=info msg="CreateContainer within sandbox \"728a6d8a66a0a735a0f43af0e809b10cf9b3f5ce3de8158e41c9b33f2097c823\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"ddd3001141e71ac861376e4e7459ce0fc050d1e3ebea946821ce662759122714\"" Jul 14 22:47:04.261975 env[1204]: time="2025-07-14T22:47:04.261948515Z" level=info msg="StartContainer for \"ddd3001141e71ac861376e4e7459ce0fc050d1e3ebea946821ce662759122714\"" Jul 14 22:47:04.274784 systemd[1]: Started cri-containerd-ddd3001141e71ac861376e4e7459ce0fc050d1e3ebea946821ce662759122714.scope. Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7fb4f9827778 items=0 ppid=2007 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643330303131343165373161633836313337366534653734353963 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit: BPF prog-id=104 op=LOAD Jul 14 22:47:04.285000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003b2248 items=0 ppid=2007 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643330303131343165373161633836313337366534653734353963 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit: BPF prog-id=105 op=LOAD Jul 14 22:47:04.285000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003b2298 items=0 ppid=2007 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643330303131343165373161633836313337366534653734353963 Jul 14 22:47:04.285000 audit: BPF prog-id=105 op=UNLOAD Jul 14 22:47:04.285000 audit: BPF prog-id=104 op=UNLOAD Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { perfmon } for pid=2049 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit[2049]: AVC avc: denied { bpf } for pid=2049 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.285000 audit: BPF prog-id=106 op=LOAD Jul 14 22:47:04.285000 audit[2049]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003b2328 items=0 ppid=2007 pid=2049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464643330303131343165373161633836313337366534653734353963 Jul 14 22:47:04.296141 env[1204]: time="2025-07-14T22:47:04.296104675Z" level=info msg="StartContainer for \"ddd3001141e71ac861376e4e7459ce0fc050d1e3ebea946821ce662759122714\" returns successfully" Jul 14 22:47:04.333160 env[1204]: time="2025-07-14T22:47:04.333103493Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-mx7kd,Uid:2efbdcbe-d8ba-4b8b-ab43-accc116478c7,Namespace:tigera-operator,Attempt:0,}" Jul 14 22:47:04.346418 env[1204]: time="2025-07-14T22:47:04.346290644Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:04.346418 env[1204]: time="2025-07-14T22:47:04.346321102Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:04.346418 env[1204]: time="2025-07-14T22:47:04.346330510Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:04.346628 env[1204]: time="2025-07-14T22:47:04.346447294Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/304bbc3ae7a9b8db75d7e624f7b81b0c7361a8cea51701afa8ae6b91f2e29cf6 pid=2090 runtime=io.containerd.runc.v2 Jul 14 22:47:04.355878 systemd[1]: Started cri-containerd-304bbc3ae7a9b8db75d7e624f7b81b0c7361a8cea51701afa8ae6b91f2e29cf6.scope. Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.364000 audit: BPF prog-id=107 op=LOAD Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2090 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346262633361653761396238646237356437653632346637623831 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2090 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346262633361653761396238646237356437653632346637623831 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit: BPF prog-id=108 op=LOAD Jul 14 22:47:04.365000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001dbd30 items=0 ppid=2090 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346262633361653761396238646237356437653632346637623831 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit: BPF prog-id=109 op=LOAD Jul 14 22:47:04.365000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001dbd78 items=0 ppid=2090 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346262633361653761396238646237356437653632346637623831 Jul 14 22:47:04.365000 audit: BPF prog-id=109 op=UNLOAD Jul 14 22:47:04.365000 audit: BPF prog-id=108 op=UNLOAD Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { perfmon } for pid=2099 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit[2099]: AVC avc: denied { bpf } for pid=2099 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:04.365000 audit: BPF prog-id=110 op=LOAD Jul 14 22:47:04.365000 audit[2099]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0003c6188 items=0 ppid=2090 pid=2099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.365000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3330346262633361653761396238646237356437653632346637623831 Jul 14 22:47:04.388383 env[1204]: time="2025-07-14T22:47:04.388343873Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-mx7kd,Uid:2efbdcbe-d8ba-4b8b-ab43-accc116478c7,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"304bbc3ae7a9b8db75d7e624f7b81b0c7361a8cea51701afa8ae6b91f2e29cf6\"" Jul 14 22:47:04.390155 env[1204]: time="2025-07-14T22:47:04.389624132Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 22:47:04.389000 audit[2150]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2150 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.389000 audit[2151]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2151 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.389000 audit[2151]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6ede7d10 a2=0 a3=7ffe6ede7cfc items=0 ppid=2059 pid=2151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.389000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 22:47:04.389000 audit[2150]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd8fb777e0 a2=0 a3=7ffd8fb777cc items=0 ppid=2059 pid=2150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.389000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 22:47:04.391000 audit[2152]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2152 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.391000 audit[2152]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0f7baef0 a2=0 a3=7ffc0f7baedc items=0 ppid=2059 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.391000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 22:47:04.392000 audit[2154]: NETFILTER_CFG table=filter:41 family=10 entries=1 op=nft_register_chain pid=2154 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.392000 audit[2153]: NETFILTER_CFG table=nat:42 family=2 entries=1 op=nft_register_chain pid=2153 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.392000 audit[2153]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd32a54dd0 a2=0 a3=872c6563169ca57 items=0 ppid=2059 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.392000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 22:47:04.392000 audit[2154]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff2c98f7c0 a2=0 a3=7fff2c98f7ac items=0 ppid=2059 pid=2154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.392000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 22:47:04.393000 audit[2155]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2155 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.393000 audit[2155]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc64c7f820 a2=0 a3=7ffc64c7f80c items=0 ppid=2059 pid=2155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.393000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 22:47:04.491000 audit[2156]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2156 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.491000 audit[2156]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeb92cec10 a2=0 a3=7ffeb92cebfc items=0 ppid=2059 pid=2156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.491000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 22:47:04.493000 audit[2158]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2158 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.493000 audit[2158]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fffe9f17af0 a2=0 a3=7fffe9f17adc items=0 ppid=2059 pid=2158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.493000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 22:47:04.495000 audit[2161]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2161 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.495000 audit[2161]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffda5d8d970 a2=0 a3=7ffda5d8d95c items=0 ppid=2059 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.495000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 22:47:04.496000 audit[2162]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2162 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.496000 audit[2162]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd0e090150 a2=0 a3=7ffd0e09013c items=0 ppid=2059 pid=2162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.496000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 22:47:04.498000 audit[2164]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2164 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.498000 audit[2164]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe35497090 a2=0 a3=7ffe3549707c items=0 ppid=2059 pid=2164 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.498000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 22:47:04.499000 audit[2165]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2165 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.499000 audit[2165]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe08b6d740 a2=0 a3=7ffe08b6d72c items=0 ppid=2059 pid=2165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.499000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 22:47:04.500000 audit[2167]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2167 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.500000 audit[2167]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffec3011990 a2=0 a3=7ffec301197c items=0 ppid=2059 pid=2167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.500000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 22:47:04.503000 audit[2170]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2170 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.503000 audit[2170]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffcce9486d0 a2=0 a3=7ffcce9486bc items=0 ppid=2059 pid=2170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.503000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 22:47:04.504000 audit[2171]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2171 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.504000 audit[2171]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff618e9f20 a2=0 a3=7fff618e9f0c items=0 ppid=2059 pid=2171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.504000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 22:47:04.506000 audit[2173]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2173 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.506000 audit[2173]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc23b266e0 a2=0 a3=7ffc23b266cc items=0 ppid=2059 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.506000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 22:47:04.507000 audit[2174]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2174 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.507000 audit[2174]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc16edd560 a2=0 a3=7ffc16edd54c items=0 ppid=2059 pid=2174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.507000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 22:47:04.508000 audit[2176]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2176 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.508000 audit[2176]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd533c9740 a2=0 a3=7ffd533c972c items=0 ppid=2059 pid=2176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.508000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:47:04.511000 audit[2179]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2179 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.511000 audit[2179]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff4d9dacc0 a2=0 a3=7fff4d9dacac items=0 ppid=2059 pid=2179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.511000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:47:04.514000 audit[2182]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2182 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.514000 audit[2182]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe6ce9d000 a2=0 a3=7ffe6ce9cfec items=0 ppid=2059 pid=2182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.514000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 22:47:04.515000 audit[2183]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2183 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.515000 audit[2183]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff8effb8e0 a2=0 a3=7fff8effb8cc items=0 ppid=2059 pid=2183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.515000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 22:47:04.516000 audit[2185]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2185 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.516000 audit[2185]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe00cdc7a0 a2=0 a3=7ffe00cdc78c items=0 ppid=2059 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.516000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:47:04.519000 audit[2188]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2188 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.519000 audit[2188]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc486709e0 a2=0 a3=7ffc486709cc items=0 ppid=2059 pid=2188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.519000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:47:04.520000 audit[2189]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2189 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.520000 audit[2189]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7d42d8c0 a2=0 a3=7ffd7d42d8ac items=0 ppid=2059 pid=2189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.520000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 22:47:04.521000 audit[2191]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2191 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 22:47:04.521000 audit[2191]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe257b2330 a2=0 a3=7ffe257b231c items=0 ppid=2059 pid=2191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.521000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 22:47:04.540000 audit[2197]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:04.540000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff3bf7ad70 a2=0 a3=7fff3bf7ad5c items=0 ppid=2059 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.540000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:04.549000 audit[2197]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2197 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:04.549000 audit[2197]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7fff3bf7ad70 a2=0 a3=7fff3bf7ad5c items=0 ppid=2059 pid=2197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.549000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:04.550000 audit[2202]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2202 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.550000 audit[2202]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffeac2cc910 a2=0 a3=7ffeac2cc8fc items=0 ppid=2059 pid=2202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.550000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 22:47:04.551000 audit[2204]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2204 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.551000 audit[2204]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdf38a28b0 a2=0 a3=7ffdf38a289c items=0 ppid=2059 pid=2204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.551000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 22:47:04.554000 audit[2207]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2207 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.554000 audit[2207]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd7dab3e90 a2=0 a3=7ffd7dab3e7c items=0 ppid=2059 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.554000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 22:47:04.555000 audit[2208]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2208 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.555000 audit[2208]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe20e55e20 a2=0 a3=7ffe20e55e0c items=0 ppid=2059 pid=2208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.555000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 22:47:04.557000 audit[2210]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2210 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.557000 audit[2210]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcdc219e00 a2=0 a3=7ffcdc219dec items=0 ppid=2059 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 22:47:04.557000 audit[2211]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2211 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.557000 audit[2211]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc2bbc4920 a2=0 a3=7ffc2bbc490c items=0 ppid=2059 pid=2211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.557000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 22:47:04.559000 audit[2213]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2213 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.559000 audit[2213]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffa3659510 a2=0 a3=7fffa36594fc items=0 ppid=2059 pid=2213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.559000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 22:47:04.562000 audit[2216]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2216 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.562000 audit[2216]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffcae065360 a2=0 a3=7ffcae06534c items=0 ppid=2059 pid=2216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.562000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 22:47:04.563000 audit[2217]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2217 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.563000 audit[2217]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc77519dc0 a2=0 a3=7ffc77519dac items=0 ppid=2059 pid=2217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.563000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 22:47:04.564000 audit[2219]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2219 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.564000 audit[2219]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe230de960 a2=0 a3=7ffe230de94c items=0 ppid=2059 pid=2219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.564000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 22:47:04.565000 audit[2220]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2220 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.565000 audit[2220]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe32a05f70 a2=0 a3=7ffe32a05f5c items=0 ppid=2059 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.565000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 22:47:04.567000 audit[2222]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2222 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.567000 audit[2222]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffed955d8f0 a2=0 a3=7ffed955d8dc items=0 ppid=2059 pid=2222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.567000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 22:47:04.570000 audit[2225]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2225 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.570000 audit[2225]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcac48e0d0 a2=0 a3=7ffcac48e0bc items=0 ppid=2059 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.570000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 22:47:04.572000 audit[2228]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2228 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.572000 audit[2228]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb560f240 a2=0 a3=7fffb560f22c items=0 ppid=2059 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.572000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 22:47:04.573000 audit[2229]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2229 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.573000 audit[2229]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffe852115e0 a2=0 a3=7ffe852115cc items=0 ppid=2059 pid=2229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.573000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 22:47:04.575000 audit[2231]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2231 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.575000 audit[2231]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffda7beb6f0 a2=0 a3=7ffda7beb6dc items=0 ppid=2059 pid=2231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.575000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:47:04.577000 audit[2234]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2234 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.577000 audit[2234]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffcae34ef20 a2=0 a3=7ffcae34ef0c items=0 ppid=2059 pid=2234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.577000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 22:47:04.578000 audit[2235]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2235 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.578000 audit[2235]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffee697c030 a2=0 a3=7ffee697c01c items=0 ppid=2059 pid=2235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.578000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 22:47:04.580000 audit[2237]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2237 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.580000 audit[2237]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffc12e229a0 a2=0 a3=7ffc12e2298c items=0 ppid=2059 pid=2237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.580000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 22:47:04.580000 audit[2238]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2238 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.580000 audit[2238]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd480d26b0 a2=0 a3=7ffd480d269c items=0 ppid=2059 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.580000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 22:47:04.582000 audit[2240]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2240 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.582000 audit[2240]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcbd24b890 a2=0 a3=7ffcbd24b87c items=0 ppid=2059 pid=2240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.582000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:47:04.585000 audit[2243]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2243 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 22:47:04.585000 audit[2243]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcf575ef90 a2=0 a3=7ffcf575ef7c items=0 ppid=2059 pid=2243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.585000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 22:47:04.587000 audit[2245]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 22:47:04.587000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffdab816bb0 a2=0 a3=7ffdab816b9c items=0 ppid=2059 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.587000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:04.587000 audit[2245]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2245 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 22:47:04.587000 audit[2245]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffdab816bb0 a2=0 a3=7ffdab816b9c items=0 ppid=2059 pid=2245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:04.587000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:05.046771 kubelet[1950]: E0714 22:47:05.046737 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:05.046771 kubelet[1950]: E0714 22:47:05.046785 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:07.537612 update_engine[1195]: I0714 22:47:07.537570 1195 update_attempter.cc:509] Updating boot flags... Jul 14 22:47:07.745520 kubelet[1950]: E0714 22:47:07.745490 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:07.753224 kubelet[1950]: I0714 22:47:07.753169 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-p9nn2" podStartSLOduration=4.753153885 podStartE2EDuration="4.753153885s" podCreationTimestamp="2025-07-14 22:47:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:47:05.054446005 +0000 UTC m=+8.096786809" watchObservedRunningTime="2025-07-14 22:47:07.753153885 +0000 UTC m=+10.795494689" Jul 14 22:47:09.978491 kubelet[1950]: E0714 22:47:09.978190 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:10.053560 kubelet[1950]: E0714 22:47:10.053492 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:10.951823 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3266577370.mount: Deactivated successfully. Jul 14 22:47:12.023344 env[1204]: time="2025-07-14T22:47:12.023260716Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:12.025933 env[1204]: time="2025-07-14T22:47:12.025857224Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:12.028084 env[1204]: time="2025-07-14T22:47:12.027991934Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:12.030148 env[1204]: time="2025-07-14T22:47:12.030020554Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:12.030645 env[1204]: time="2025-07-14T22:47:12.030593742Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 14 22:47:12.034131 env[1204]: time="2025-07-14T22:47:12.034070951Z" level=info msg="CreateContainer within sandbox \"304bbc3ae7a9b8db75d7e624f7b81b0c7361a8cea51701afa8ae6b91f2e29cf6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 22:47:12.071276 env[1204]: time="2025-07-14T22:47:12.071193398Z" level=info msg="CreateContainer within sandbox \"304bbc3ae7a9b8db75d7e624f7b81b0c7361a8cea51701afa8ae6b91f2e29cf6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"f8331a880f1d8a1e600ebc968356f76402fd2966eec3f19012ead775e8b6b199\"" Jul 14 22:47:12.073328 env[1204]: time="2025-07-14T22:47:12.073291268Z" level=info msg="StartContainer for \"f8331a880f1d8a1e600ebc968356f76402fd2966eec3f19012ead775e8b6b199\"" Jul 14 22:47:12.111599 systemd[1]: Started cri-containerd-f8331a880f1d8a1e600ebc968356f76402fd2966eec3f19012ead775e8b6b199.scope. Jul 14 22:47:12.131208 kernel: kauditd_printk_skb: 300 callbacks suppressed Jul 14 22:47:12.131371 kernel: audit: type=1400 audit(1752533232.126:899): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.146172 kernel: audit: type=1400 audit(1752533232.126:900): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.146362 kernel: audit: type=1400 audit(1752533232.126:901): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.149232 kernel: audit: type=1400 audit(1752533232.126:902): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.156326 kernel: audit: type=1400 audit(1752533232.126:903): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.156466 kernel: audit: type=1400 audit(1752533232.126:904): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.163930 kernel: audit: type=1400 audit(1752533232.126:905): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.164026 kernel: audit: type=1400 audit(1752533232.126:906): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.171482 kernel: audit: type=1400 audit(1752533232.126:907): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.171601 kernel: audit: type=1400 audit(1752533232.137:908): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.137000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.137000 audit: BPF prog-id=111 op=LOAD Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=2090 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:12.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333331613838306631643861316536303065626339363833353666 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=2090 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:12.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333331613838306631643861316536303065626339363833353666 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.138000 audit: BPF prog-id=112 op=LOAD Jul 14 22:47:12.138000 audit[2269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c0002578a0 items=0 ppid=2090 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:12.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333331613838306631643861316536303065626339363833353666 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.147000 audit: BPF prog-id=113 op=LOAD Jul 14 22:47:12.147000 audit[2269]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c0002578e8 items=0 ppid=2090 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:12.147000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333331613838306631643861316536303065626339363833353666 Jul 14 22:47:12.151000 audit: BPF prog-id=113 op=UNLOAD Jul 14 22:47:12.151000 audit: BPF prog-id=112 op=UNLOAD Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { perfmon } for pid=2269 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit[2269]: AVC avc: denied { bpf } for pid=2269 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:12.151000 audit: BPF prog-id=114 op=LOAD Jul 14 22:47:12.151000 audit[2269]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c000257cf8 items=0 ppid=2090 pid=2269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:12.151000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638333331613838306631643861316536303065626339363833353666 Jul 14 22:47:12.238345 env[1204]: time="2025-07-14T22:47:12.238272382Z" level=info msg="StartContainer for \"f8331a880f1d8a1e600ebc968356f76402fd2966eec3f19012ead775e8b6b199\" returns successfully" Jul 14 22:47:18.201315 sudo[1344]: pam_unix(sudo:session): session closed for user root Jul 14 22:47:18.199000 audit[1344]: USER_END pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:47:18.206440 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 14 22:47:18.206627 kernel: audit: type=1106 audit(1752533238.199:917): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:47:18.207086 sshd[1341]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:18.199000 audit[1344]: CRED_DISP pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:47:18.209536 systemd[1]: sshd@6-10.0.0.3:22-10.0.0.1:56998.service: Deactivated successfully. Jul 14 22:47:18.210134 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 22:47:18.211575 kernel: audit: type=1104 audit(1752533238.199:918): pid=1344 uid=500 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 22:47:18.210242 systemd[1]: session-7.scope: Consumed 3.329s CPU time. Jul 14 22:47:18.210650 systemd-logind[1194]: Session 7 logged out. Waiting for processes to exit. Jul 14 22:47:18.211267 systemd-logind[1194]: Removed session 7. Jul 14 22:47:18.206000 audit[1341]: USER_END pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:18.219176 kernel: audit: type=1106 audit(1752533238.206:919): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:18.219218 kernel: audit: type=1104 audit(1752533238.206:920): pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:18.206000 audit[1341]: CRED_DISP pid=1341 uid=0 auid=500 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:18.222950 kernel: audit: type=1131 audit(1752533238.208:921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.3:22-10.0.0.1:56998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:18.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-10.0.0.3:22-10.0.0.1:56998 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:18.549987 kernel: audit: type=1325 audit(1752533238.539:922): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:18.550124 kernel: audit: type=1300 audit(1752533238.539:922): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeaa9efd70 a2=0 a3=7ffeaa9efd5c items=0 ppid=2059 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:18.550149 kernel: audit: type=1327 audit(1752533238.539:922): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:18.539000 audit[2356]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:18.539000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffeaa9efd70 a2=0 a3=7ffeaa9efd5c items=0 ppid=2059 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:18.539000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:18.561000 audit[2356]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:18.564551 kernel: audit: type=1325 audit(1752533238.561:923): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2356 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:18.561000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeaa9efd70 a2=0 a3=0 items=0 ppid=2059 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:18.561000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:18.570557 kernel: audit: type=1300 audit(1752533238.561:923): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffeaa9efd70 a2=0 a3=0 items=0 ppid=2059 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:18.577000 audit[2358]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:18.577000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff14f3c5d0 a2=0 a3=7fff14f3c5bc items=0 ppid=2059 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:18.577000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:18.584000 audit[2358]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:18.584000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff14f3c5d0 a2=0 a3=0 items=0 ppid=2059 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:18.584000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:20.473000 audit[2361]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:20.473000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffe7244a310 a2=0 a3=7ffe7244a2fc items=0 ppid=2059 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:20.473000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:20.478000 audit[2361]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:20.478000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe7244a310 a2=0 a3=0 items=0 ppid=2059 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:20.478000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:20.626000 audit[2363]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:20.626000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd81a06f90 a2=0 a3=7ffd81a06f7c items=0 ppid=2059 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:20.626000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:20.630000 audit[2363]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:20.630000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd81a06f90 a2=0 a3=0 items=0 ppid=2059 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:20.630000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:20.687584 kubelet[1950]: I0714 22:47:20.687503 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-mx7kd" podStartSLOduration=9.044777787 podStartE2EDuration="16.687481927s" podCreationTimestamp="2025-07-14 22:47:04 +0000 UTC" firstStartedPulling="2025-07-14 22:47:04.389038432 +0000 UTC m=+7.431379236" lastFinishedPulling="2025-07-14 22:47:12.031742572 +0000 UTC m=+15.074083376" observedRunningTime="2025-07-14 22:47:13.092622381 +0000 UTC m=+16.134963185" watchObservedRunningTime="2025-07-14 22:47:20.687481927 +0000 UTC m=+23.729822761" Jul 14 22:47:20.689064 kubelet[1950]: I0714 22:47:20.689022 1950 status_manager.go:890] "Failed to get status for pod" podUID="8f92c183-2040-4a76-a6f3-b9c5a64f4233" pod="calico-system/calico-typha-6fbd56fb49-7rc75" err="pods \"calico-typha-6fbd56fb49-7rc75\" is forbidden: User \"system:node:localhost\" cannot get resource \"pods\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" Jul 14 22:47:20.689643 kubelet[1950]: W0714 22:47:20.689603 1950 reflector.go:569] object-"calico-system"/"typha-certs": failed to list *v1.Secret: secrets "typha-certs" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 14 22:47:20.689712 kubelet[1950]: E0714 22:47:20.689643 1950 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"typha-certs\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"typha-certs\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 22:47:20.690114 kubelet[1950]: W0714 22:47:20.690074 1950 reflector.go:569] object-"calico-system"/"tigera-ca-bundle": failed to list *v1.ConfigMap: configmaps "tigera-ca-bundle" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 14 22:47:20.690114 kubelet[1950]: E0714 22:47:20.690101 1950 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"tigera-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"tigera-ca-bundle\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 22:47:20.690498 kubelet[1950]: W0714 22:47:20.690473 1950 reflector.go:569] object-"calico-system"/"kube-root-ca.crt": failed to list *v1.ConfigMap: configmaps "kube-root-ca.crt" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 14 22:47:20.690580 kubelet[1950]: E0714 22:47:20.690503 1950 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"kube-root-ca.crt\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"kube-root-ca.crt\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 22:47:20.693473 systemd[1]: Created slice kubepods-besteffort-pod8f92c183_2040_4a76_a6f3_b9c5a64f4233.slice. Jul 14 22:47:20.766841 kubelet[1950]: I0714 22:47:20.766720 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/8f92c183-2040-4a76-a6f3-b9c5a64f4233-typha-certs\") pod \"calico-typha-6fbd56fb49-7rc75\" (UID: \"8f92c183-2040-4a76-a6f3-b9c5a64f4233\") " pod="calico-system/calico-typha-6fbd56fb49-7rc75" Jul 14 22:47:20.766841 kubelet[1950]: I0714 22:47:20.766774 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-qzlff\" (UniqueName: \"kubernetes.io/projected/8f92c183-2040-4a76-a6f3-b9c5a64f4233-kube-api-access-qzlff\") pod \"calico-typha-6fbd56fb49-7rc75\" (UID: \"8f92c183-2040-4a76-a6f3-b9c5a64f4233\") " pod="calico-system/calico-typha-6fbd56fb49-7rc75" Jul 14 22:47:20.766841 kubelet[1950]: I0714 22:47:20.766810 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8f92c183-2040-4a76-a6f3-b9c5a64f4233-tigera-ca-bundle\") pod \"calico-typha-6fbd56fb49-7rc75\" (UID: \"8f92c183-2040-4a76-a6f3-b9c5a64f4233\") " pod="calico-system/calico-typha-6fbd56fb49-7rc75" Jul 14 22:47:21.088500 systemd[1]: Created slice kubepods-besteffort-pod1fc24038_a1e1_4695_81c8_bd7ccc2da875.slice. Jul 14 22:47:21.169428 kubelet[1950]: I0714 22:47:21.169393 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1fc24038-a1e1-4695-81c8-bd7ccc2da875-tigera-ca-bundle\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169633 kubelet[1950]: I0714 22:47:21.169614 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-var-lib-calico\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169759 kubelet[1950]: I0714 22:47:21.169730 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-var-run-calico\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169759 kubelet[1950]: I0714 22:47:21.169758 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-flexvol-driver-host\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169946 kubelet[1950]: I0714 22:47:21.169775 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-cni-log-dir\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169946 kubelet[1950]: I0714 22:47:21.169791 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/1fc24038-a1e1-4695-81c8-bd7ccc2da875-node-certs\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169946 kubelet[1950]: I0714 22:47:21.169805 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-cni-bin-dir\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169946 kubelet[1950]: I0714 22:47:21.169858 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-policysync\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.169946 kubelet[1950]: I0714 22:47:21.169893 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-xtables-lock\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.170064 kubelet[1950]: I0714 22:47:21.169929 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9kn57\" (UniqueName: \"kubernetes.io/projected/1fc24038-a1e1-4695-81c8-bd7ccc2da875-kube-api-access-9kn57\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.170064 kubelet[1950]: I0714 22:47:21.169956 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-cni-net-dir\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.170064 kubelet[1950]: I0714 22:47:21.169970 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/1fc24038-a1e1-4695-81c8-bd7ccc2da875-lib-modules\") pod \"calico-node-2zxfp\" (UID: \"1fc24038-a1e1-4695-81c8-bd7ccc2da875\") " pod="calico-system/calico-node-2zxfp" Jul 14 22:47:21.270888 kubelet[1950]: E0714 22:47:21.270855 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.270888 kubelet[1950]: W0714 22:47:21.270875 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.271045 kubelet[1950]: E0714 22:47:21.270910 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.273439 kubelet[1950]: E0714 22:47:21.273416 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.273439 kubelet[1950]: W0714 22:47:21.273433 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.273561 kubelet[1950]: E0714 22:47:21.273445 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.378248 kubelet[1950]: E0714 22:47:21.378195 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:21.454210 kubelet[1950]: E0714 22:47:21.454161 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.454210 kubelet[1950]: W0714 22:47:21.454184 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.454210 kubelet[1950]: E0714 22:47:21.454203 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.454415 kubelet[1950]: E0714 22:47:21.454389 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.454415 kubelet[1950]: W0714 22:47:21.454396 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.454415 kubelet[1950]: E0714 22:47:21.454403 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.454574 kubelet[1950]: E0714 22:47:21.454562 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.454574 kubelet[1950]: W0714 22:47:21.454572 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.454639 kubelet[1950]: E0714 22:47:21.454579 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.454857 kubelet[1950]: E0714 22:47:21.454820 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.454857 kubelet[1950]: W0714 22:47:21.454843 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.455054 kubelet[1950]: E0714 22:47:21.454869 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.455107 kubelet[1950]: E0714 22:47:21.455092 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.455107 kubelet[1950]: W0714 22:47:21.455103 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.455157 kubelet[1950]: E0714 22:47:21.455112 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.455273 kubelet[1950]: E0714 22:47:21.455255 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.455273 kubelet[1950]: W0714 22:47:21.455269 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.455273 kubelet[1950]: E0714 22:47:21.455279 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.455430 kubelet[1950]: E0714 22:47:21.455412 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.455430 kubelet[1950]: W0714 22:47:21.455422 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.455430 kubelet[1950]: E0714 22:47:21.455429 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.455587 kubelet[1950]: E0714 22:47:21.455574 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.455587 kubelet[1950]: W0714 22:47:21.455583 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.455672 kubelet[1950]: E0714 22:47:21.455590 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.455712 kubelet[1950]: E0714 22:47:21.455692 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.455712 kubelet[1950]: W0714 22:47:21.455705 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.455775 kubelet[1950]: E0714 22:47:21.455712 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.455952 kubelet[1950]: E0714 22:47:21.455938 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.455952 kubelet[1950]: W0714 22:47:21.455946 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.456036 kubelet[1950]: E0714 22:47:21.455954 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.456133 kubelet[1950]: E0714 22:47:21.456114 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.456133 kubelet[1950]: W0714 22:47:21.456129 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.456133 kubelet[1950]: E0714 22:47:21.456142 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.456354 kubelet[1950]: E0714 22:47:21.456331 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.456354 kubelet[1950]: W0714 22:47:21.456343 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.456354 kubelet[1950]: E0714 22:47:21.456351 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.456506 kubelet[1950]: E0714 22:47:21.456495 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.456506 kubelet[1950]: W0714 22:47:21.456504 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.456574 kubelet[1950]: E0714 22:47:21.456511 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.456694 kubelet[1950]: E0714 22:47:21.456680 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.456694 kubelet[1950]: W0714 22:47:21.456692 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.456757 kubelet[1950]: E0714 22:47:21.456701 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.456852 kubelet[1950]: E0714 22:47:21.456839 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.456852 kubelet[1950]: W0714 22:47:21.456849 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.456898 kubelet[1950]: E0714 22:47:21.456857 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.456999 kubelet[1950]: E0714 22:47:21.456987 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.456999 kubelet[1950]: W0714 22:47:21.456996 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.457067 kubelet[1950]: E0714 22:47:21.457003 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.457176 kubelet[1950]: E0714 22:47:21.457162 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.457203 kubelet[1950]: W0714 22:47:21.457174 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.457203 kubelet[1950]: E0714 22:47:21.457185 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.457400 kubelet[1950]: E0714 22:47:21.457382 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.457400 kubelet[1950]: W0714 22:47:21.457394 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.457474 kubelet[1950]: E0714 22:47:21.457403 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.457585 kubelet[1950]: E0714 22:47:21.457564 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.457585 kubelet[1950]: W0714 22:47:21.457577 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.457585 kubelet[1950]: E0714 22:47:21.457584 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.458247 kubelet[1950]: E0714 22:47:21.458230 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.458247 kubelet[1950]: W0714 22:47:21.458242 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.458247 kubelet[1950]: E0714 22:47:21.458252 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.472703 kubelet[1950]: E0714 22:47:21.472673 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.472703 kubelet[1950]: W0714 22:47:21.472692 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.472703 kubelet[1950]: E0714 22:47:21.472703 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.472804 kubelet[1950]: I0714 22:47:21.472728 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/8727a635-0d5f-4f08-b7a4-2a66134d8eff-registration-dir\") pod \"csi-node-driver-bdgzk\" (UID: \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\") " pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:21.472844 kubelet[1950]: E0714 22:47:21.472831 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.472844 kubelet[1950]: W0714 22:47:21.472840 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.472928 kubelet[1950]: E0714 22:47:21.472851 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.472928 kubelet[1950]: I0714 22:47:21.472864 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/8727a635-0d5f-4f08-b7a4-2a66134d8eff-socket-dir\") pod \"csi-node-driver-bdgzk\" (UID: \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\") " pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:21.473058 kubelet[1950]: E0714 22:47:21.473042 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.473058 kubelet[1950]: W0714 22:47:21.473055 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.473112 kubelet[1950]: E0714 22:47:21.473069 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.473238 kubelet[1950]: E0714 22:47:21.473226 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.473238 kubelet[1950]: W0714 22:47:21.473235 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.473296 kubelet[1950]: E0714 22:47:21.473248 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.473425 kubelet[1950]: E0714 22:47:21.473413 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.473451 kubelet[1950]: W0714 22:47:21.473425 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.473451 kubelet[1950]: E0714 22:47:21.473436 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.473497 kubelet[1950]: I0714 22:47:21.473451 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/8727a635-0d5f-4f08-b7a4-2a66134d8eff-varrun\") pod \"csi-node-driver-bdgzk\" (UID: \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\") " pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:21.473621 kubelet[1950]: E0714 22:47:21.473610 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.473621 kubelet[1950]: W0714 22:47:21.473619 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.473694 kubelet[1950]: E0714 22:47:21.473629 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.473694 kubelet[1950]: I0714 22:47:21.473641 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/8727a635-0d5f-4f08-b7a4-2a66134d8eff-kubelet-dir\") pod \"csi-node-driver-bdgzk\" (UID: \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\") " pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:21.473795 kubelet[1950]: E0714 22:47:21.473780 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.473795 kubelet[1950]: W0714 22:47:21.473792 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.473867 kubelet[1950]: E0714 22:47:21.473806 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.473867 kubelet[1950]: I0714 22:47:21.473823 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4f22p\" (UniqueName: \"kubernetes.io/projected/8727a635-0d5f-4f08-b7a4-2a66134d8eff-kube-api-access-4f22p\") pod \"csi-node-driver-bdgzk\" (UID: \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\") " pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:21.473996 kubelet[1950]: E0714 22:47:21.473977 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.473996 kubelet[1950]: W0714 22:47:21.473992 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.474070 kubelet[1950]: E0714 22:47:21.474007 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.474182 kubelet[1950]: E0714 22:47:21.474163 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.474182 kubelet[1950]: W0714 22:47:21.474175 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.474247 kubelet[1950]: E0714 22:47:21.474185 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.474358 kubelet[1950]: E0714 22:47:21.474345 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.474358 kubelet[1950]: W0714 22:47:21.474354 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.474460 kubelet[1950]: E0714 22:47:21.474365 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.474508 kubelet[1950]: E0714 22:47:21.474495 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.474508 kubelet[1950]: W0714 22:47:21.474504 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.474508 kubelet[1950]: E0714 22:47:21.474510 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.474739 kubelet[1950]: E0714 22:47:21.474624 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.474739 kubelet[1950]: W0714 22:47:21.474634 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.474739 kubelet[1950]: E0714 22:47:21.474641 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.474903 kubelet[1950]: E0714 22:47:21.474881 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.474903 kubelet[1950]: W0714 22:47:21.474890 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.474903 kubelet[1950]: E0714 22:47:21.474899 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.475094 kubelet[1950]: E0714 22:47:21.475081 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.475094 kubelet[1950]: W0714 22:47:21.475089 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.475166 kubelet[1950]: E0714 22:47:21.475097 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.475221 kubelet[1950]: E0714 22:47:21.475211 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.475221 kubelet[1950]: W0714 22:47:21.475218 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.475265 kubelet[1950]: E0714 22:47:21.475224 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.575192 kubelet[1950]: E0714 22:47:21.575162 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.575192 kubelet[1950]: W0714 22:47:21.575183 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.575297 kubelet[1950]: E0714 22:47:21.575201 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.575442 kubelet[1950]: E0714 22:47:21.575428 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.575540 kubelet[1950]: W0714 22:47:21.575496 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.575540 kubelet[1950]: E0714 22:47:21.575523 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.575726 kubelet[1950]: E0714 22:47:21.575714 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.575726 kubelet[1950]: W0714 22:47:21.575723 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.575796 kubelet[1950]: E0714 22:47:21.575736 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.575965 kubelet[1950]: E0714 22:47:21.575945 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.575965 kubelet[1950]: W0714 22:47:21.575959 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.576032 kubelet[1950]: E0714 22:47:21.575975 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.576173 kubelet[1950]: E0714 22:47:21.576150 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.576173 kubelet[1950]: W0714 22:47:21.576165 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.576237 kubelet[1950]: E0714 22:47:21.576175 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.576372 kubelet[1950]: E0714 22:47:21.576342 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.576372 kubelet[1950]: W0714 22:47:21.576351 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.576437 kubelet[1950]: E0714 22:47:21.576375 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.576571 kubelet[1950]: E0714 22:47:21.576560 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.576571 kubelet[1950]: W0714 22:47:21.576568 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.576634 kubelet[1950]: E0714 22:47:21.576579 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.576739 kubelet[1950]: E0714 22:47:21.576721 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.576739 kubelet[1950]: W0714 22:47:21.576730 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.576787 kubelet[1950]: E0714 22:47:21.576739 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.576881 kubelet[1950]: E0714 22:47:21.576869 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.576881 kubelet[1950]: W0714 22:47:21.576876 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.576944 kubelet[1950]: E0714 22:47:21.576895 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.576986 kubelet[1950]: E0714 22:47:21.576977 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.576986 kubelet[1950]: W0714 22:47:21.576983 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.577034 kubelet[1950]: E0714 22:47:21.577008 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.577131 kubelet[1950]: E0714 22:47:21.577119 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.577180 kubelet[1950]: W0714 22:47:21.577130 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.577180 kubelet[1950]: E0714 22:47:21.577163 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.577254 kubelet[1950]: E0714 22:47:21.577246 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.577254 kubelet[1950]: W0714 22:47:21.577253 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.577311 kubelet[1950]: E0714 22:47:21.577270 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.577433 kubelet[1950]: E0714 22:47:21.577421 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.577433 kubelet[1950]: W0714 22:47:21.577429 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.577504 kubelet[1950]: E0714 22:47:21.577438 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.577692 kubelet[1950]: E0714 22:47:21.577666 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.577692 kubelet[1950]: W0714 22:47:21.577678 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.577692 kubelet[1950]: E0714 22:47:21.577692 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.577910 kubelet[1950]: E0714 22:47:21.577848 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.577910 kubelet[1950]: W0714 22:47:21.577867 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.577910 kubelet[1950]: E0714 22:47:21.577879 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.578045 kubelet[1950]: E0714 22:47:21.578028 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.578045 kubelet[1950]: W0714 22:47:21.578039 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.578045 kubelet[1950]: E0714 22:47:21.578051 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.578190 kubelet[1950]: E0714 22:47:21.578174 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.578190 kubelet[1950]: W0714 22:47:21.578184 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.578296 kubelet[1950]: E0714 22:47:21.578216 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.578340 kubelet[1950]: E0714 22:47:21.578320 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.578340 kubelet[1950]: W0714 22:47:21.578331 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.578435 kubelet[1950]: E0714 22:47:21.578361 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.578477 kubelet[1950]: E0714 22:47:21.578459 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.578477 kubelet[1950]: W0714 22:47:21.578468 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.578564 kubelet[1950]: E0714 22:47:21.578488 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.578698 kubelet[1950]: E0714 22:47:21.578676 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.578698 kubelet[1950]: W0714 22:47:21.578691 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.578787 kubelet[1950]: E0714 22:47:21.578712 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.578926 kubelet[1950]: E0714 22:47:21.578910 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.578926 kubelet[1950]: W0714 22:47:21.578920 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.578999 kubelet[1950]: E0714 22:47:21.578932 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.579054 kubelet[1950]: E0714 22:47:21.579042 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.579054 kubelet[1950]: W0714 22:47:21.579051 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.579101 kubelet[1950]: E0714 22:47:21.579064 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.579210 kubelet[1950]: E0714 22:47:21.579194 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.579210 kubelet[1950]: W0714 22:47:21.579203 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.579282 kubelet[1950]: E0714 22:47:21.579215 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.579362 kubelet[1950]: E0714 22:47:21.579349 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.579362 kubelet[1950]: W0714 22:47:21.579357 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.579425 kubelet[1950]: E0714 22:47:21.579368 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.579501 kubelet[1950]: E0714 22:47:21.579489 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.579501 kubelet[1950]: W0714 22:47:21.579496 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.579586 kubelet[1950]: E0714 22:47:21.579506 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.643000 audit[2430]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:21.643000 audit[2430]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcddf20610 a2=0 a3=7ffcddf205fc items=0 ppid=2059 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:21.643000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:21.647000 audit[2430]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2430 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:21.647000 audit[2430]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcddf20610 a2=0 a3=0 items=0 ppid=2059 pid=2430 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:21.647000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:21.867386 kubelet[1950]: E0714 22:47:21.867357 1950 secret.go:189] Couldn't get secret calico-system/typha-certs: failed to sync secret cache: timed out waiting for the condition Jul 14 22:47:21.867386 kubelet[1950]: E0714 22:47:21.867367 1950 configmap.go:193] Couldn't get configMap calico-system/tigera-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:21.867756 kubelet[1950]: E0714 22:47:21.867437 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/8f92c183-2040-4a76-a6f3-b9c5a64f4233-typha-certs podName:8f92c183-2040-4a76-a6f3-b9c5a64f4233 nodeName:}" failed. No retries permitted until 2025-07-14 22:47:22.367417367 +0000 UTC m=+25.409758171 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "typha-certs" (UniqueName: "kubernetes.io/secret/8f92c183-2040-4a76-a6f3-b9c5a64f4233-typha-certs") pod "calico-typha-6fbd56fb49-7rc75" (UID: "8f92c183-2040-4a76-a6f3-b9c5a64f4233") : failed to sync secret cache: timed out waiting for the condition Jul 14 22:47:21.867756 kubelet[1950]: E0714 22:47:21.867454 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/8f92c183-2040-4a76-a6f3-b9c5a64f4233-tigera-ca-bundle podName:8f92c183-2040-4a76-a6f3-b9c5a64f4233 nodeName:}" failed. No retries permitted until 2025-07-14 22:47:22.367447815 +0000 UTC m=+25.409788609 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "tigera-ca-bundle" (UniqueName: "kubernetes.io/configmap/8f92c183-2040-4a76-a6f3-b9c5a64f4233-tigera-ca-bundle") pod "calico-typha-6fbd56fb49-7rc75" (UID: "8f92c183-2040-4a76-a6f3-b9c5a64f4233") : failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:21.872104 kubelet[1950]: E0714 22:47:21.872075 1950 projected.go:288] Couldn't get configMap calico-system/kube-root-ca.crt: failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:21.872154 kubelet[1950]: E0714 22:47:21.872111 1950 projected.go:194] Error preparing data for projected volume kube-api-access-qzlff for pod calico-system/calico-typha-6fbd56fb49-7rc75: failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:21.872187 kubelet[1950]: E0714 22:47:21.872172 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/projected/8f92c183-2040-4a76-a6f3-b9c5a64f4233-kube-api-access-qzlff podName:8f92c183-2040-4a76-a6f3-b9c5a64f4233 nodeName:}" failed. No retries permitted until 2025-07-14 22:47:22.372154399 +0000 UTC m=+25.414495203 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "kube-api-access-qzlff" (UniqueName: "kubernetes.io/projected/8f92c183-2040-4a76-a6f3-b9c5a64f4233-kube-api-access-qzlff") pod "calico-typha-6fbd56fb49-7rc75" (UID: "8f92c183-2040-4a76-a6f3-b9c5a64f4233") : failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:21.878713 kubelet[1950]: E0714 22:47:21.878697 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.878713 kubelet[1950]: W0714 22:47:21.878711 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.878780 kubelet[1950]: E0714 22:47:21.878729 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.878895 kubelet[1950]: E0714 22:47:21.878882 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.878895 kubelet[1950]: W0714 22:47:21.878890 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.878941 kubelet[1950]: E0714 22:47:21.878899 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.879113 kubelet[1950]: E0714 22:47:21.879093 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.879113 kubelet[1950]: W0714 22:47:21.879103 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.879113 kubelet[1950]: E0714 22:47:21.879109 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.961859 kubelet[1950]: E0714 22:47:21.961761 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.961859 kubelet[1950]: W0714 22:47:21.961779 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.961859 kubelet[1950]: E0714 22:47:21.961795 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.979648 kubelet[1950]: E0714 22:47:21.979623 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.979648 kubelet[1950]: W0714 22:47:21.979634 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.979648 kubelet[1950]: E0714 22:47:21.979646 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.979867 kubelet[1950]: E0714 22:47:21.979852 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.979867 kubelet[1950]: W0714 22:47:21.979861 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.979916 kubelet[1950]: E0714 22:47:21.979870 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:21.980084 kubelet[1950]: E0714 22:47:21.980045 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:21.980084 kubelet[1950]: W0714 22:47:21.980063 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:21.980084 kubelet[1950]: E0714 22:47:21.980082 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.080679 kubelet[1950]: E0714 22:47:22.080646 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.080679 kubelet[1950]: W0714 22:47:22.080666 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.080679 kubelet[1950]: E0714 22:47:22.080683 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.080887 kubelet[1950]: E0714 22:47:22.080873 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.080887 kubelet[1950]: W0714 22:47:22.080885 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.080936 kubelet[1950]: E0714 22:47:22.080894 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.081069 kubelet[1950]: E0714 22:47:22.081055 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.081069 kubelet[1950]: W0714 22:47:22.081063 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.081069 kubelet[1950]: E0714 22:47:22.081070 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.088688 kubelet[1950]: E0714 22:47:22.088664 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.088688 kubelet[1950]: W0714 22:47:22.088680 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.088688 kubelet[1950]: E0714 22:47:22.088689 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.092059 kubelet[1950]: E0714 22:47:22.092040 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.092059 kubelet[1950]: W0714 22:47:22.092057 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.092138 kubelet[1950]: E0714 22:47:22.092069 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.181854 kubelet[1950]: E0714 22:47:22.181826 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.181854 kubelet[1950]: W0714 22:47:22.181848 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.181979 kubelet[1950]: E0714 22:47:22.181867 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.182068 kubelet[1950]: E0714 22:47:22.182052 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.182068 kubelet[1950]: W0714 22:47:22.182062 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.182068 kubelet[1950]: E0714 22:47:22.182070 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.182319 kubelet[1950]: E0714 22:47:22.182303 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.182319 kubelet[1950]: W0714 22:47:22.182313 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.182319 kubelet[1950]: E0714 22:47:22.182320 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.283612 kubelet[1950]: E0714 22:47:22.283490 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.283612 kubelet[1950]: W0714 22:47:22.283511 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.283612 kubelet[1950]: E0714 22:47:22.283541 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.283803 kubelet[1950]: E0714 22:47:22.283736 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.283803 kubelet[1950]: W0714 22:47:22.283746 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.283803 kubelet[1950]: E0714 22:47:22.283755 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.283962 kubelet[1950]: E0714 22:47:22.283943 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.283962 kubelet[1950]: W0714 22:47:22.283956 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.284058 kubelet[1950]: E0714 22:47:22.283967 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.290591 env[1204]: time="2025-07-14T22:47:22.290550252Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2zxfp,Uid:1fc24038-a1e1-4695-81c8-bd7ccc2da875,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:22.309511 env[1204]: time="2025-07-14T22:47:22.309446013Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:22.309511 env[1204]: time="2025-07-14T22:47:22.309483814Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:22.309511 env[1204]: time="2025-07-14T22:47:22.309494124Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:22.309734 env[1204]: time="2025-07-14T22:47:22.309689202Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9 pid=2458 runtime=io.containerd.runc.v2 Jul 14 22:47:22.322697 systemd[1]: Started cri-containerd-56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9.scope. Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit: BPF prog-id=115 op=LOAD Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2458 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536623738646336396164613261656537623238613233363365333963 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2458 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536623738646336396164613261656537623238613233363365333963 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit: BPF prog-id=116 op=LOAD Jul 14 22:47:22.332000 audit[2467]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025500 items=0 ppid=2458 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536623738646336396164613261656537623238613233363365333963 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.332000 audit: BPF prog-id=117 op=LOAD Jul 14 22:47:22.332000 audit[2467]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025548 items=0 ppid=2458 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.332000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536623738646336396164613261656537623238613233363365333963 Jul 14 22:47:22.333000 audit: BPF prog-id=117 op=UNLOAD Jul 14 22:47:22.333000 audit: BPF prog-id=116 op=UNLOAD Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { perfmon } for pid=2467 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit[2467]: AVC avc: denied { bpf } for pid=2467 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.333000 audit: BPF prog-id=118 op=LOAD Jul 14 22:47:22.333000 audit[2467]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025958 items=0 ppid=2458 pid=2467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.333000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536623738646336396164613261656537623238613233363365333963 Jul 14 22:47:22.344814 env[1204]: time="2025-07-14T22:47:22.344749982Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-2zxfp,Uid:1fc24038-a1e1-4695-81c8-bd7ccc2da875,Namespace:calico-system,Attempt:0,} returns sandbox id \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\"" Jul 14 22:47:22.346680 env[1204]: time="2025-07-14T22:47:22.346645268Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 22:47:22.384651 kubelet[1950]: E0714 22:47:22.384606 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.384651 kubelet[1950]: W0714 22:47:22.384627 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.384651 kubelet[1950]: E0714 22:47:22.384645 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.384888 kubelet[1950]: E0714 22:47:22.384813 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.384888 kubelet[1950]: W0714 22:47:22.384820 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.384888 kubelet[1950]: E0714 22:47:22.384831 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.384991 kubelet[1950]: E0714 22:47:22.384977 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.384991 kubelet[1950]: W0714 22:47:22.384987 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.385040 kubelet[1950]: E0714 22:47:22.384997 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.385149 kubelet[1950]: E0714 22:47:22.385137 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.385149 kubelet[1950]: W0714 22:47:22.385146 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.385198 kubelet[1950]: E0714 22:47:22.385155 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.385343 kubelet[1950]: E0714 22:47:22.385318 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.385343 kubelet[1950]: W0714 22:47:22.385334 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.385400 kubelet[1950]: E0714 22:47:22.385349 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.385509 kubelet[1950]: E0714 22:47:22.385488 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.385509 kubelet[1950]: W0714 22:47:22.385500 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.385509 kubelet[1950]: E0714 22:47:22.385513 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.385731 kubelet[1950]: E0714 22:47:22.385667 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.385731 kubelet[1950]: W0714 22:47:22.385675 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.385731 kubelet[1950]: E0714 22:47:22.385687 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.385856 kubelet[1950]: E0714 22:47:22.385846 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.385880 kubelet[1950]: W0714 22:47:22.385855 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.385880 kubelet[1950]: E0714 22:47:22.385869 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.386198 kubelet[1950]: E0714 22:47:22.386172 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.386256 kubelet[1950]: W0714 22:47:22.386196 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.386256 kubelet[1950]: E0714 22:47:22.386225 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.386463 kubelet[1950]: E0714 22:47:22.386443 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.386463 kubelet[1950]: W0714 22:47:22.386456 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.386570 kubelet[1950]: E0714 22:47:22.386488 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.386615 kubelet[1950]: E0714 22:47:22.386601 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.386615 kubelet[1950]: W0714 22:47:22.386613 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.386669 kubelet[1950]: E0714 22:47:22.386623 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.386743 kubelet[1950]: E0714 22:47:22.386732 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.386743 kubelet[1950]: W0714 22:47:22.386741 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.386797 kubelet[1950]: E0714 22:47:22.386752 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.386929 kubelet[1950]: E0714 22:47:22.386917 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.386929 kubelet[1950]: W0714 22:47:22.386926 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.386979 kubelet[1950]: E0714 22:47:22.386937 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.387189 kubelet[1950]: E0714 22:47:22.387170 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.387189 kubelet[1950]: W0714 22:47:22.387185 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.387266 kubelet[1950]: E0714 22:47:22.387197 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.387436 kubelet[1950]: E0714 22:47:22.387420 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.387436 kubelet[1950]: W0714 22:47:22.387434 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.387486 kubelet[1950]: E0714 22:47:22.387445 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.390699 kubelet[1950]: E0714 22:47:22.388633 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.390699 kubelet[1950]: W0714 22:47:22.388646 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.390699 kubelet[1950]: E0714 22:47:22.388660 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.390699 kubelet[1950]: E0714 22:47:22.388822 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.390699 kubelet[1950]: W0714 22:47:22.388839 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.390699 kubelet[1950]: E0714 22:47:22.388848 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.391299 kubelet[1950]: E0714 22:47:22.391283 1950 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 22:47:22.391299 kubelet[1950]: W0714 22:47:22.391295 1950 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 22:47:22.391376 kubelet[1950]: E0714 22:47:22.391305 1950 plugins.go:695] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 22:47:22.495829 kubelet[1950]: E0714 22:47:22.495800 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:22.496191 env[1204]: time="2025-07-14T22:47:22.496158349Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6fbd56fb49-7rc75,Uid:8f92c183-2040-4a76-a6f3-b9c5a64f4233,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:22.510124 env[1204]: time="2025-07-14T22:47:22.510071118Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:22.510124 env[1204]: time="2025-07-14T22:47:22.510108139Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:22.510124 env[1204]: time="2025-07-14T22:47:22.510117857Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:22.510264 env[1204]: time="2025-07-14T22:47:22.510218296Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7b2ede090db7726ee9262917fb292502f95633ede1e457d0bb99417d037e8dc0 pid=2519 runtime=io.containerd.runc.v2 Jul 14 22:47:22.519518 systemd[1]: Started cri-containerd-7b2ede090db7726ee9262917fb292502f95633ede1e457d0bb99417d037e8dc0.scope. Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.527000 audit: BPF prog-id=119 op=LOAD Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2519 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762326564653039306462373732366565393236323931376662323932 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2519 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762326564653039306462373732366565393236323931376662323932 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit: BPF prog-id=120 op=LOAD Jul 14 22:47:22.528000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00032dd10 items=0 ppid=2519 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762326564653039306462373732366565393236323931376662323932 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit: BPF prog-id=121 op=LOAD Jul 14 22:47:22.528000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00032dd58 items=0 ppid=2519 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762326564653039306462373732366565393236323931376662323932 Jul 14 22:47:22.528000 audit: BPF prog-id=121 op=UNLOAD Jul 14 22:47:22.528000 audit: BPF prog-id=120 op=UNLOAD Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { perfmon } for pid=2528 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit[2528]: AVC avc: denied { bpf } for pid=2528 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:22.528000 audit: BPF prog-id=122 op=LOAD Jul 14 22:47:22.528000 audit[2528]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ae168 items=0 ppid=2519 pid=2528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:22.528000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762326564653039306462373732366565393236323931376662323932 Jul 14 22:47:22.547290 env[1204]: time="2025-07-14T22:47:22.547185934Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6fbd56fb49-7rc75,Uid:8f92c183-2040-4a76-a6f3-b9c5a64f4233,Namespace:calico-system,Attempt:0,} returns sandbox id \"7b2ede090db7726ee9262917fb292502f95633ede1e457d0bb99417d037e8dc0\"" Jul 14 22:47:22.550728 kubelet[1950]: E0714 22:47:22.550703 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:23.029967 kubelet[1950]: E0714 22:47:23.029933 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:23.877265 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1986778741.mount: Deactivated successfully. Jul 14 22:47:24.019460 env[1204]: time="2025-07-14T22:47:24.019423217Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:24.021318 env[1204]: time="2025-07-14T22:47:24.021262814Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:24.022709 env[1204]: time="2025-07-14T22:47:24.022681539Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:24.024035 env[1204]: time="2025-07-14T22:47:24.024006436Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:24.024444 env[1204]: time="2025-07-14T22:47:24.024418313Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 14 22:47:24.025409 env[1204]: time="2025-07-14T22:47:24.025253638Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 22:47:24.028609 env[1204]: time="2025-07-14T22:47:24.028566684Z" level=info msg="CreateContainer within sandbox \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 22:47:24.041511 env[1204]: time="2025-07-14T22:47:24.041460953Z" level=info msg="CreateContainer within sandbox \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee\"" Jul 14 22:47:24.041895 env[1204]: time="2025-07-14T22:47:24.041857470Z" level=info msg="StartContainer for \"3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee\"" Jul 14 22:47:24.056981 systemd[1]: Started cri-containerd-3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee.scope. Jul 14 22:47:24.068000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.070110 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 14 22:47:24.070154 kernel: audit: type=1400 audit(1752533244.068:968): avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.068000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f5fa92f1a48 items=0 ppid=2458 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:24.078326 kernel: audit: type=1300 audit(1752533244.068:968): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f5fa92f1a48 items=0 ppid=2458 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:24.078363 kernel: audit: type=1327 audit(1752533244.068:968): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616461386365353539356234643634396437356135393531633063 Jul 14 22:47:24.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616461386365353539356234643634396437356135393531633063 Jul 14 22:47:24.086673 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.090675 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.094340 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.094386 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.098344 env[1204]: time="2025-07-14T22:47:24.098304238Z" level=info msg="StartContainer for \"3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee\" returns successfully" Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.102439 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.102483 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.109893 kernel: audit: type=1400 audit(1752533244.071:969): avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.071000 audit: BPF prog-id=123 op=LOAD Jul 14 22:47:24.071000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c0001bac18 items=0 ppid=2458 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:24.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616461386365353539356234643634396437356135393531633063 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.073000 audit: BPF prog-id=124 op=LOAD Jul 14 22:47:24.073000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c0001bac68 items=0 ppid=2458 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:24.073000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616461386365353539356234643634396437356135393531633063 Jul 14 22:47:24.082000 audit: BPF prog-id=124 op=UNLOAD Jul 14 22:47:24.082000 audit: BPF prog-id=123 op=UNLOAD Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { perfmon } for pid=2561 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit[2561]: AVC avc: denied { bpf } for pid=2561 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:24.082000 audit: BPF prog-id=125 op=LOAD Jul 14 22:47:24.082000 audit[2561]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c0001bacf8 items=0 ppid=2458 pid=2561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:24.082000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363616461386365353539356234643634396437356135393531633063 Jul 14 22:47:24.110264 systemd[1]: cri-containerd-3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee.scope: Deactivated successfully. Jul 14 22:47:24.116000 audit: BPF prog-id=125 op=UNLOAD Jul 14 22:47:24.145740 env[1204]: time="2025-07-14T22:47:24.144810164Z" level=info msg="shim disconnected" id=3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee Jul 14 22:47:24.145740 env[1204]: time="2025-07-14T22:47:24.144847845Z" level=warning msg="cleaning up after shim disconnected" id=3cada8ce5595b4d649d75a5951c0c29ba93b986976c878964b78bcf97bf64bee namespace=k8s.io Jul 14 22:47:24.145740 env[1204]: time="2025-07-14T22:47:24.144855740Z" level=info msg="cleaning up dead shim" Jul 14 22:47:24.151197 env[1204]: time="2025-07-14T22:47:24.151141631Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:47:24Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2601 runtime=io.containerd.runc.v2\n" Jul 14 22:47:25.029931 kubelet[1950]: E0714 22:47:25.029889 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:26.672826 env[1204]: time="2025-07-14T22:47:26.672779702Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:26.674344 env[1204]: time="2025-07-14T22:47:26.674319894Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:26.675756 env[1204]: time="2025-07-14T22:47:26.675734829Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:26.677109 env[1204]: time="2025-07-14T22:47:26.677073381Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:26.677650 env[1204]: time="2025-07-14T22:47:26.677624860Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 14 22:47:26.679419 env[1204]: time="2025-07-14T22:47:26.679396949Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 22:47:26.686008 env[1204]: time="2025-07-14T22:47:26.685959332Z" level=info msg="CreateContainer within sandbox \"7b2ede090db7726ee9262917fb292502f95633ede1e457d0bb99417d037e8dc0\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 22:47:26.697486 env[1204]: time="2025-07-14T22:47:26.697438418Z" level=info msg="CreateContainer within sandbox \"7b2ede090db7726ee9262917fb292502f95633ede1e457d0bb99417d037e8dc0\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"9ee57e36476d0bb4002fde8750b3e391958ed9f5d67565b867b0a4493362a922\"" Jul 14 22:47:26.697829 env[1204]: time="2025-07-14T22:47:26.697807654Z" level=info msg="StartContainer for \"9ee57e36476d0bb4002fde8750b3e391958ed9f5d67565b867b0a4493362a922\"" Jul 14 22:47:26.713324 systemd[1]: Started cri-containerd-9ee57e36476d0bb4002fde8750b3e391958ed9f5d67565b867b0a4493362a922.scope. Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.724000 audit: BPF prog-id=126 op=LOAD Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2519 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:26.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653537653336343736643062623430303266646538373530623365 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2519 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:26.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653537653336343736643062623430303266646538373530623365 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit: BPF prog-id=127 op=LOAD Jul 14 22:47:26.725000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000323990 items=0 ppid=2519 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:26.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653537653336343736643062623430303266646538373530623365 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit: BPF prog-id=128 op=LOAD Jul 14 22:47:26.725000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003239d8 items=0 ppid=2519 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:26.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653537653336343736643062623430303266646538373530623365 Jul 14 22:47:26.725000 audit: BPF prog-id=128 op=UNLOAD Jul 14 22:47:26.725000 audit: BPF prog-id=127 op=UNLOAD Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { perfmon } for pid=2627 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit[2627]: AVC avc: denied { bpf } for pid=2627 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:26.725000 audit: BPF prog-id=129 op=LOAD Jul 14 22:47:26.725000 audit[2627]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000323de8 items=0 ppid=2519 pid=2627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:26.725000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965653537653336343736643062623430303266646538373530623365 Jul 14 22:47:27.026565 env[1204]: time="2025-07-14T22:47:27.025143393Z" level=info msg="StartContainer for \"9ee57e36476d0bb4002fde8750b3e391958ed9f5d67565b867b0a4493362a922\" returns successfully" Jul 14 22:47:27.028060 kubelet[1950]: E0714 22:47:27.027983 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:27.094742 kubelet[1950]: E0714 22:47:27.094704 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:27.109713 kubelet[1950]: I0714 22:47:27.109643 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6fbd56fb49-7rc75" podStartSLOduration=2.982271677 podStartE2EDuration="7.109623904s" podCreationTimestamp="2025-07-14 22:47:20 +0000 UTC" firstStartedPulling="2025-07-14 22:47:22.551914676 +0000 UTC m=+25.594255480" lastFinishedPulling="2025-07-14 22:47:26.679266903 +0000 UTC m=+29.721607707" observedRunningTime="2025-07-14 22:47:27.108691688 +0000 UTC m=+30.151032492" watchObservedRunningTime="2025-07-14 22:47:27.109623904 +0000 UTC m=+30.151964708" Jul 14 22:47:28.096608 kubelet[1950]: E0714 22:47:28.096324 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:28.124000 audit[2664]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:28.124000 audit[2664]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffca862d500 a2=0 a3=7ffca862d4ec items=0 ppid=2059 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:28.124000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:28.138000 audit[2664]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2664 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:28.138000 audit[2664]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffca862d500 a2=0 a3=7ffca862d4ec items=0 ppid=2059 pid=2664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:28.138000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:29.029053 kubelet[1950]: E0714 22:47:29.028982 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:29.098064 kubelet[1950]: E0714 22:47:29.098035 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:30.099135 kubelet[1950]: E0714 22:47:30.099093 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:31.028299 kubelet[1950]: E0714 22:47:31.028247 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:31.311737 env[1204]: time="2025-07-14T22:47:31.311625802Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:31.313649 env[1204]: time="2025-07-14T22:47:31.313580049Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:31.315105 env[1204]: time="2025-07-14T22:47:31.315055946Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:31.316481 env[1204]: time="2025-07-14T22:47:31.316447825Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:31.316904 env[1204]: time="2025-07-14T22:47:31.316879697Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 14 22:47:31.318855 env[1204]: time="2025-07-14T22:47:31.318831018Z" level=info msg="CreateContainer within sandbox \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 22:47:31.332508 env[1204]: time="2025-07-14T22:47:31.332461983Z" level=info msg="CreateContainer within sandbox \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5\"" Jul 14 22:47:31.334625 env[1204]: time="2025-07-14T22:47:31.334590248Z" level=info msg="StartContainer for \"b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5\"" Jul 14 22:47:31.351703 systemd[1]: Started cri-containerd-b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5.scope. Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.366360 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 14 22:47:31.366413 kernel: audit: type=1400 audit(1752533251.364:995): avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f8d30dd6ac8 items=0 ppid=2458 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:31.373947 kernel: audit: type=1300 audit(1752533251.364:995): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f8d30dd6ac8 items=0 ppid=2458 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:31.373991 kernel: audit: type=1327 audit(1752533251.364:995): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233623362653537326264373563636134623265326233383237643863 Jul 14 22:47:31.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233623362653537326264373563636134623265326233383237643863 Jul 14 22:47:31.377923 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380961 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.386869 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.386909 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.393629 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.396911 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.401142 kernel: audit: type=1400 audit(1752533251.364:996): avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.364000 audit: BPF prog-id=130 op=LOAD Jul 14 22:47:31.364000 audit[2672]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0002cdba8 items=0 ppid=2458 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:31.364000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233623362653537326264373563636134623265326233383237643863 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.373000 audit: BPF prog-id=131 op=LOAD Jul 14 22:47:31.373000 audit[2672]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0002cdbf8 items=0 ppid=2458 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:31.373000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233623362653537326264373563636134623265326233383237643863 Jul 14 22:47:31.380000 audit: BPF prog-id=131 op=UNLOAD Jul 14 22:47:31.380000 audit: BPF prog-id=130 op=UNLOAD Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { perfmon } for pid=2672 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit[2672]: AVC avc: denied { bpf } for pid=2672 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:31.380000 audit: BPF prog-id=132 op=LOAD Jul 14 22:47:31.380000 audit[2672]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0002cdc88 items=0 ppid=2458 pid=2672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:31.380000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6233623362653537326264373563636134623265326233383237643863 Jul 14 22:47:31.658461 env[1204]: time="2025-07-14T22:47:31.658403982Z" level=info msg="StartContainer for \"b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5\" returns successfully" Jul 14 22:47:32.285518 kubelet[1950]: E0714 22:47:32.285482 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:32.892117 env[1204]: time="2025-07-14T22:47:32.892047059Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 22:47:32.893650 systemd[1]: cri-containerd-b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5.scope: Deactivated successfully. Jul 14 22:47:32.896863 kubelet[1950]: I0714 22:47:32.896838 1950 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 14 22:47:32.899000 audit: BPF prog-id=132 op=UNLOAD Jul 14 22:47:32.911759 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5-rootfs.mount: Deactivated successfully. Jul 14 22:47:32.920480 env[1204]: time="2025-07-14T22:47:32.920430207Z" level=info msg="shim disconnected" id=b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5 Jul 14 22:47:32.920480 env[1204]: time="2025-07-14T22:47:32.920473138Z" level=warning msg="cleaning up after shim disconnected" id=b3b3be572bd75cca4b2e2b3827d8c2fe805a4ff379834233de45bfaa359ed6e5 namespace=k8s.io Jul 14 22:47:32.920480 env[1204]: time="2025-07-14T22:47:32.920480992Z" level=info msg="cleaning up dead shim" Jul 14 22:47:32.925338 systemd[1]: Created slice kubepods-burstable-pod5ee219b8_da54_48a0_b525_adcb85b9c9a7.slice. Jul 14 22:47:32.933479 systemd[1]: Created slice kubepods-burstable-pod77a73afb_9132_4fa9_83f4_003723533a93.slice. Jul 14 22:47:32.938902 kubelet[1950]: W0714 22:47:32.938869 1950 reflector.go:569] object-"calico-system"/"whisker-backend-key-pair": failed to list *v1.Secret: secrets "whisker-backend-key-pair" is forbidden: User "system:node:localhost" cannot list resource "secrets" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 14 22:47:32.940923 systemd[1]: Created slice kubepods-besteffort-pod81e1b119_f229_4f94_b2d8_c7b7a938e151.slice. Jul 14 22:47:32.941670 kubelet[1950]: E0714 22:47:32.941646 1950 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"whisker-backend-key-pair\": Failed to watch *v1.Secret: failed to list *v1.Secret: secrets \"whisker-backend-key-pair\" is forbidden: User \"system:node:localhost\" cannot list resource \"secrets\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 22:47:32.942768 kubelet[1950]: W0714 22:47:32.941002 1950 reflector.go:569] object-"calico-system"/"whisker-ca-bundle": failed to list *v1.ConfigMap: configmaps "whisker-ca-bundle" is forbidden: User "system:node:localhost" cannot list resource "configmaps" in API group "" in the namespace "calico-system": no relationship found between node 'localhost' and this object Jul 14 22:47:32.942870 kubelet[1950]: E0714 22:47:32.942851 1950 reflector.go:166] "Unhandled Error" err="object-\"calico-system\"/\"whisker-ca-bundle\": Failed to watch *v1.ConfigMap: failed to list *v1.ConfigMap: configmaps \"whisker-ca-bundle\" is forbidden: User \"system:node:localhost\" cannot list resource \"configmaps\" in API group \"\" in the namespace \"calico-system\": no relationship found between node 'localhost' and this object" logger="UnhandledError" Jul 14 22:47:32.946570 env[1204]: time="2025-07-14T22:47:32.946481058Z" level=warning msg="cleanup warnings time=\"2025-07-14T22:47:32Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2712 runtime=io.containerd.runc.v2\n" Jul 14 22:47:32.948732 systemd[1]: Created slice kubepods-besteffort-pode1fa90dd_8e5c_41ef_bc25_ac9a4f546f84.slice. Jul 14 22:47:32.954714 systemd[1]: Created slice kubepods-besteffort-pod1d27edfd_ce40_43ee_9d20_1b732dbc94f6.slice. Jul 14 22:47:32.960043 systemd[1]: Created slice kubepods-besteffort-pod8daac05b_2fb1_4779_a14d_bff0eae51684.slice. Jul 14 22:47:32.965936 systemd[1]: Created slice kubepods-besteffort-pod9b1f43e8_e77f_43a1_ba40_772e672f0eef.slice. Jul 14 22:47:33.077004 kubelet[1950]: I0714 22:47:33.076956 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4svfl\" (UniqueName: \"kubernetes.io/projected/81e1b119-f229-4f94-b2d8-c7b7a938e151-kube-api-access-4svfl\") pod \"calico-kube-controllers-f498f6dc-7zpk5\" (UID: \"81e1b119-f229-4f94-b2d8-c7b7a938e151\") " pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" Jul 14 22:47:33.077004 kubelet[1950]: I0714 22:47:33.076994 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-jqr5p\" (UniqueName: \"kubernetes.io/projected/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-kube-api-access-jqr5p\") pod \"whisker-6699bd5d6c-7hkp9\" (UID: \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\") " pod="calico-system/whisker-6699bd5d6c-7hkp9" Jul 14 22:47:33.077192 kubelet[1950]: I0714 22:47:33.077105 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/8daac05b-2fb1-4779-a14d-bff0eae51684-goldmane-key-pair\") pod \"goldmane-768f4c5c69-j7g99\" (UID: \"8daac05b-2fb1-4779-a14d-bff0eae51684\") " pod="calico-system/goldmane-768f4c5c69-j7g99" Jul 14 22:47:33.077223 kubelet[1950]: I0714 22:47:33.077214 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-backend-key-pair\") pod \"whisker-6699bd5d6c-7hkp9\" (UID: \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\") " pod="calico-system/whisker-6699bd5d6c-7hkp9" Jul 14 22:47:33.077249 kubelet[1950]: I0714 22:47:33.077242 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/81e1b119-f229-4f94-b2d8-c7b7a938e151-tigera-ca-bundle\") pod \"calico-kube-controllers-f498f6dc-7zpk5\" (UID: \"81e1b119-f229-4f94-b2d8-c7b7a938e151\") " pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" Jul 14 22:47:33.077280 kubelet[1950]: I0714 22:47:33.077266 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/8daac05b-2fb1-4779-a14d-bff0eae51684-config\") pod \"goldmane-768f4c5c69-j7g99\" (UID: \"8daac05b-2fb1-4779-a14d-bff0eae51684\") " pod="calico-system/goldmane-768f4c5c69-j7g99" Jul 14 22:47:33.077309 kubelet[1950]: I0714 22:47:33.077289 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-95zps\" (UniqueName: \"kubernetes.io/projected/5ee219b8-da54-48a0-b525-adcb85b9c9a7-kube-api-access-95zps\") pod \"coredns-668d6bf9bc-cbzv8\" (UID: \"5ee219b8-da54-48a0-b525-adcb85b9c9a7\") " pod="kube-system/coredns-668d6bf9bc-cbzv8" Jul 14 22:47:33.077309 kubelet[1950]: I0714 22:47:33.077305 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kmnd2\" (UniqueName: \"kubernetes.io/projected/e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84-kube-api-access-kmnd2\") pod \"calico-apiserver-66666fb6d-jv8ws\" (UID: \"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84\") " pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" Jul 14 22:47:33.077364 kubelet[1950]: I0714 22:47:33.077322 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n8w52\" (UniqueName: \"kubernetes.io/projected/9b1f43e8-e77f-43a1-ba40-772e672f0eef-kube-api-access-n8w52\") pod \"calico-apiserver-66666fb6d-7dl4r\" (UID: \"9b1f43e8-e77f-43a1-ba40-772e672f0eef\") " pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" Jul 14 22:47:33.077364 kubelet[1950]: I0714 22:47:33.077337 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2t6r5\" (UniqueName: \"kubernetes.io/projected/77a73afb-9132-4fa9-83f4-003723533a93-kube-api-access-2t6r5\") pod \"coredns-668d6bf9bc-sxff4\" (UID: \"77a73afb-9132-4fa9-83f4-003723533a93\") " pod="kube-system/coredns-668d6bf9bc-sxff4" Jul 14 22:47:33.077415 kubelet[1950]: I0714 22:47:33.077403 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-ca-bundle\") pod \"whisker-6699bd5d6c-7hkp9\" (UID: \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\") " pod="calico-system/whisker-6699bd5d6c-7hkp9" Jul 14 22:47:33.077442 kubelet[1950]: I0714 22:47:33.077422 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-h4cpf\" (UniqueName: \"kubernetes.io/projected/8daac05b-2fb1-4779-a14d-bff0eae51684-kube-api-access-h4cpf\") pod \"goldmane-768f4c5c69-j7g99\" (UID: \"8daac05b-2fb1-4779-a14d-bff0eae51684\") " pod="calico-system/goldmane-768f4c5c69-j7g99" Jul 14 22:47:33.077486 kubelet[1950]: I0714 22:47:33.077438 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/77a73afb-9132-4fa9-83f4-003723533a93-config-volume\") pod \"coredns-668d6bf9bc-sxff4\" (UID: \"77a73afb-9132-4fa9-83f4-003723533a93\") " pod="kube-system/coredns-668d6bf9bc-sxff4" Jul 14 22:47:33.077552 kubelet[1950]: I0714 22:47:33.077513 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/8daac05b-2fb1-4779-a14d-bff0eae51684-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-j7g99\" (UID: \"8daac05b-2fb1-4779-a14d-bff0eae51684\") " pod="calico-system/goldmane-768f4c5c69-j7g99" Jul 14 22:47:33.077585 kubelet[1950]: I0714 22:47:33.077554 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/9b1f43e8-e77f-43a1-ba40-772e672f0eef-calico-apiserver-certs\") pod \"calico-apiserver-66666fb6d-7dl4r\" (UID: \"9b1f43e8-e77f-43a1-ba40-772e672f0eef\") " pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" Jul 14 22:47:33.077585 kubelet[1950]: I0714 22:47:33.077571 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/5ee219b8-da54-48a0-b525-adcb85b9c9a7-config-volume\") pod \"coredns-668d6bf9bc-cbzv8\" (UID: \"5ee219b8-da54-48a0-b525-adcb85b9c9a7\") " pod="kube-system/coredns-668d6bf9bc-cbzv8" Jul 14 22:47:33.077638 kubelet[1950]: I0714 22:47:33.077590 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84-calico-apiserver-certs\") pod \"calico-apiserver-66666fb6d-jv8ws\" (UID: \"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84\") " pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" Jul 14 22:47:33.229864 kubelet[1950]: E0714 22:47:33.229778 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:33.230512 env[1204]: time="2025-07-14T22:47:33.230342856Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-cbzv8,Uid:5ee219b8-da54-48a0-b525-adcb85b9c9a7,Namespace:kube-system,Attempt:0,}" Jul 14 22:47:33.238166 kubelet[1950]: E0714 22:47:33.238143 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:33.238482 env[1204]: time="2025-07-14T22:47:33.238445834Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sxff4,Uid:77a73afb-9132-4fa9-83f4-003723533a93,Namespace:kube-system,Attempt:0,}" Jul 14 22:47:33.244819 env[1204]: time="2025-07-14T22:47:33.244787801Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f498f6dc-7zpk5,Uid:81e1b119-f229-4f94-b2d8-c7b7a938e151,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:33.255224 env[1204]: time="2025-07-14T22:47:33.255172000Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-jv8ws,Uid:e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:47:33.264430 env[1204]: time="2025-07-14T22:47:33.264391408Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-j7g99,Uid:8daac05b-2fb1-4779-a14d-bff0eae51684,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:33.270271 env[1204]: time="2025-07-14T22:47:33.270242310Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-7dl4r,Uid:9b1f43e8-e77f-43a1-ba40-772e672f0eef,Namespace:calico-apiserver,Attempt:0,}" Jul 14 22:47:33.292329 env[1204]: time="2025-07-14T22:47:33.292244427Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 22:47:33.326150 env[1204]: time="2025-07-14T22:47:33.326072474Z" level=error msg="Failed to destroy network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.326476 env[1204]: time="2025-07-14T22:47:33.326437921Z" level=error msg="encountered an error cleaning up failed sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.326520 env[1204]: time="2025-07-14T22:47:33.326492704Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-cbzv8,Uid:5ee219b8-da54-48a0-b525-adcb85b9c9a7,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.326782 kubelet[1950]: E0714 22:47:33.326747 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.327030 kubelet[1950]: E0714 22:47:33.326813 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-cbzv8" Jul 14 22:47:33.327030 kubelet[1950]: E0714 22:47:33.326833 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-cbzv8" Jul 14 22:47:33.327030 kubelet[1950]: E0714 22:47:33.326882 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-cbzv8_kube-system(5ee219b8-da54-48a0-b525-adcb85b9c9a7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-cbzv8_kube-system(5ee219b8-da54-48a0-b525-adcb85b9c9a7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-cbzv8" podUID="5ee219b8-da54-48a0-b525-adcb85b9c9a7" Jul 14 22:47:33.360695 env[1204]: time="2025-07-14T22:47:33.360636234Z" level=error msg="Failed to destroy network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.361143 env[1204]: time="2025-07-14T22:47:33.361115806Z" level=error msg="encountered an error cleaning up failed sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.361202 env[1204]: time="2025-07-14T22:47:33.361167453Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-j7g99,Uid:8daac05b-2fb1-4779-a14d-bff0eae51684,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.361368 kubelet[1950]: E0714 22:47:33.361337 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.361427 kubelet[1950]: E0714 22:47:33.361389 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-j7g99" Jul 14 22:47:33.361427 kubelet[1950]: E0714 22:47:33.361410 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-j7g99" Jul 14 22:47:33.361478 kubelet[1950]: E0714 22:47:33.361446 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-j7g99_calico-system(8daac05b-2fb1-4779-a14d-bff0eae51684)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-j7g99_calico-system(8daac05b-2fb1-4779-a14d-bff0eae51684)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-j7g99" podUID="8daac05b-2fb1-4779-a14d-bff0eae51684" Jul 14 22:47:33.365546 env[1204]: time="2025-07-14T22:47:33.365489161Z" level=error msg="Failed to destroy network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.365796 env[1204]: time="2025-07-14T22:47:33.365772723Z" level=error msg="encountered an error cleaning up failed sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.365833 env[1204]: time="2025-07-14T22:47:33.365814703Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sxff4,Uid:77a73afb-9132-4fa9-83f4-003723533a93,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.366008 kubelet[1950]: E0714 22:47:33.365979 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.366081 kubelet[1950]: E0714 22:47:33.366038 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-sxff4" Jul 14 22:47:33.366081 kubelet[1950]: E0714 22:47:33.366063 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-668d6bf9bc-sxff4" Jul 14 22:47:33.366131 kubelet[1950]: E0714 22:47:33.366098 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-668d6bf9bc-sxff4_kube-system(77a73afb-9132-4fa9-83f4-003723533a93)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-668d6bf9bc-sxff4_kube-system(77a73afb-9132-4fa9-83f4-003723533a93)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-sxff4" podUID="77a73afb-9132-4fa9-83f4-003723533a93" Jul 14 22:47:33.385236 env[1204]: time="2025-07-14T22:47:33.385168730Z" level=error msg="Failed to destroy network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385413 env[1204]: time="2025-07-14T22:47:33.385165373Z" level=error msg="Failed to destroy network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385509 env[1204]: time="2025-07-14T22:47:33.385479264Z" level=error msg="encountered an error cleaning up failed sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385593 env[1204]: time="2025-07-14T22:47:33.385510322Z" level=error msg="encountered an error cleaning up failed sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385593 env[1204]: time="2025-07-14T22:47:33.385553994Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f498f6dc-7zpk5,Uid:81e1b119-f229-4f94-b2d8-c7b7a938e151,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385593 env[1204]: time="2025-07-14T22:47:33.385557420Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-jv8ws,Uid:e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385849 kubelet[1950]: E0714 22:47:33.385735 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385849 kubelet[1950]: E0714 22:47:33.385782 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" Jul 14 22:47:33.385849 kubelet[1950]: E0714 22:47:33.385800 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" Jul 14 22:47:33.385939 kubelet[1950]: E0714 22:47:33.385836 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-66666fb6d-jv8ws_calico-apiserver(e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-66666fb6d-jv8ws_calico-apiserver(e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" podUID="e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84" Jul 14 22:47:33.385939 kubelet[1950]: E0714 22:47:33.385869 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.385939 kubelet[1950]: E0714 22:47:33.385884 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" Jul 14 22:47:33.386084 kubelet[1950]: E0714 22:47:33.385897 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" Jul 14 22:47:33.386084 kubelet[1950]: E0714 22:47:33.385920 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-f498f6dc-7zpk5_calico-system(81e1b119-f229-4f94-b2d8-c7b7a938e151)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-f498f6dc-7zpk5_calico-system(81e1b119-f229-4f94-b2d8-c7b7a938e151)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" podUID="81e1b119-f229-4f94-b2d8-c7b7a938e151" Jul 14 22:47:33.387707 env[1204]: time="2025-07-14T22:47:33.387656388Z" level=error msg="Failed to destroy network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.387970 env[1204]: time="2025-07-14T22:47:33.387941644Z" level=error msg="encountered an error cleaning up failed sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.388042 env[1204]: time="2025-07-14T22:47:33.387988833Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-7dl4r,Uid:9b1f43e8-e77f-43a1-ba40-772e672f0eef,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.388240 kubelet[1950]: E0714 22:47:33.388201 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:33.388307 kubelet[1950]: E0714 22:47:33.388262 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" Jul 14 22:47:33.388307 kubelet[1950]: E0714 22:47:33.388280 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" Jul 14 22:47:33.388367 kubelet[1950]: E0714 22:47:33.388326 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-66666fb6d-7dl4r_calico-apiserver(9b1f43e8-e77f-43a1-ba40-772e672f0eef)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-66666fb6d-7dl4r_calico-apiserver(9b1f43e8-e77f-43a1-ba40-772e672f0eef)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" podUID="9b1f43e8-e77f-43a1-ba40-772e672f0eef" Jul 14 22:47:34.035257 systemd[1]: Created slice kubepods-besteffort-pod8727a635_0d5f_4f08_b7a4_2a66134d8eff.slice. Jul 14 22:47:34.037168 env[1204]: time="2025-07-14T22:47:34.037132229Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdgzk,Uid:8727a635-0d5f-4f08-b7a4-2a66134d8eff,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:34.081234 env[1204]: time="2025-07-14T22:47:34.081178155Z" level=error msg="Failed to destroy network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.081497 env[1204]: time="2025-07-14T22:47:34.081472809Z" level=error msg="encountered an error cleaning up failed sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.081558 env[1204]: time="2025-07-14T22:47:34.081537250Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdgzk,Uid:8727a635-0d5f-4f08-b7a4-2a66134d8eff,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.081787 kubelet[1950]: E0714 22:47:34.081746 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.081866 kubelet[1950]: E0714 22:47:34.081810 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:34.081866 kubelet[1950]: E0714 22:47:34.081831 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bdgzk" Jul 14 22:47:34.081925 kubelet[1950]: E0714 22:47:34.081868 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-bdgzk_calico-system(8727a635-0d5f-4f08-b7a4-2a66134d8eff)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-bdgzk_calico-system(8727a635-0d5f-4f08-b7a4-2a66134d8eff)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:34.083126 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7-shm.mount: Deactivated successfully. Jul 14 22:47:34.178921 kubelet[1950]: E0714 22:47:34.178887 1950 configmap.go:193] Couldn't get configMap calico-system/whisker-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:34.178985 kubelet[1950]: E0714 22:47:34.178950 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-ca-bundle podName:1d27edfd-ce40-43ee-9d20-1b732dbc94f6 nodeName:}" failed. No retries permitted until 2025-07-14 22:47:34.678932184 +0000 UTC m=+37.721272988 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "whisker-ca-bundle" (UniqueName: "kubernetes.io/configmap/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-ca-bundle") pod "whisker-6699bd5d6c-7hkp9" (UID: "1d27edfd-ce40-43ee-9d20-1b732dbc94f6") : failed to sync configmap cache: timed out waiting for the condition Jul 14 22:47:34.180052 kubelet[1950]: E0714 22:47:34.179992 1950 secret.go:189] Couldn't get secret calico-system/whisker-backend-key-pair: failed to sync secret cache: timed out waiting for the condition Jul 14 22:47:34.180185 kubelet[1950]: E0714 22:47:34.180082 1950 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-backend-key-pair podName:1d27edfd-ce40-43ee-9d20-1b732dbc94f6 nodeName:}" failed. No retries permitted until 2025-07-14 22:47:34.680063391 +0000 UTC m=+37.722404195 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "whisker-backend-key-pair" (UniqueName: "kubernetes.io/secret/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-backend-key-pair") pod "whisker-6699bd5d6c-7hkp9" (UID: "1d27edfd-ce40-43ee-9d20-1b732dbc94f6") : failed to sync secret cache: timed out waiting for the condition Jul 14 22:47:34.293208 kubelet[1950]: I0714 22:47:34.292582 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:34.293348 env[1204]: time="2025-07-14T22:47:34.293104382Z" level=info msg="StopPodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\"" Jul 14 22:47:34.293893 kubelet[1950]: I0714 22:47:34.293617 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:34.294028 env[1204]: time="2025-07-14T22:47:34.294003873Z" level=info msg="StopPodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\"" Jul 14 22:47:34.294784 kubelet[1950]: I0714 22:47:34.294759 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:34.295425 env[1204]: time="2025-07-14T22:47:34.295396261Z" level=info msg="StopPodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\"" Jul 14 22:47:34.296905 kubelet[1950]: I0714 22:47:34.296824 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:34.297508 env[1204]: time="2025-07-14T22:47:34.297467886Z" level=info msg="StopPodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\"" Jul 14 22:47:34.298545 kubelet[1950]: I0714 22:47:34.298517 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:34.298890 env[1204]: time="2025-07-14T22:47:34.298853201Z" level=info msg="StopPodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\"" Jul 14 22:47:34.300878 kubelet[1950]: I0714 22:47:34.300499 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:34.301157 env[1204]: time="2025-07-14T22:47:34.301128449Z" level=info msg="StopPodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\"" Jul 14 22:47:34.302728 kubelet[1950]: I0714 22:47:34.302397 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:34.303281 env[1204]: time="2025-07-14T22:47:34.303062325Z" level=info msg="StopPodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\"" Jul 14 22:47:34.320919 env[1204]: time="2025-07-14T22:47:34.320853156Z" level=error msg="StopPodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" failed" error="failed to destroy network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.321636 kubelet[1950]: E0714 22:47:34.321591 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:34.321699 kubelet[1950]: E0714 22:47:34.321652 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be"} Jul 14 22:47:34.321724 kubelet[1950]: E0714 22:47:34.321706 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"81e1b119-f229-4f94-b2d8-c7b7a938e151\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.321791 kubelet[1950]: E0714 22:47:34.321730 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"81e1b119-f229-4f94-b2d8-c7b7a938e151\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" podUID="81e1b119-f229-4f94-b2d8-c7b7a938e151" Jul 14 22:47:34.331265 env[1204]: time="2025-07-14T22:47:34.331205781Z" level=error msg="StopPodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" failed" error="failed to destroy network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.331656 kubelet[1950]: E0714 22:47:34.331614 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:34.331884 kubelet[1950]: E0714 22:47:34.331668 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7"} Jul 14 22:47:34.331884 kubelet[1950]: E0714 22:47:34.331700 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.331884 kubelet[1950]: E0714 22:47:34.331776 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8727a635-0d5f-4f08-b7a4-2a66134d8eff\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bdgzk" podUID="8727a635-0d5f-4f08-b7a4-2a66134d8eff" Jul 14 22:47:34.338122 env[1204]: time="2025-07-14T22:47:34.338068955Z" level=error msg="StopPodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" failed" error="failed to destroy network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.338316 kubelet[1950]: E0714 22:47:34.338277 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:34.338391 kubelet[1950]: E0714 22:47:34.338330 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66"} Jul 14 22:47:34.338391 kubelet[1950]: E0714 22:47:34.338361 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.338391 kubelet[1950]: E0714 22:47:34.338383 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" podUID="e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84" Jul 14 22:47:34.354576 env[1204]: time="2025-07-14T22:47:34.354506632Z" level=error msg="StopPodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" failed" error="failed to destroy network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.354814 kubelet[1950]: E0714 22:47:34.354767 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:34.354963 kubelet[1950]: E0714 22:47:34.354822 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75"} Jul 14 22:47:34.354963 kubelet[1950]: E0714 22:47:34.354861 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"9b1f43e8-e77f-43a1-ba40-772e672f0eef\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.354963 kubelet[1950]: E0714 22:47:34.354884 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"9b1f43e8-e77f-43a1-ba40-772e672f0eef\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" podUID="9b1f43e8-e77f-43a1-ba40-772e672f0eef" Jul 14 22:47:34.358403 env[1204]: time="2025-07-14T22:47:34.358353073Z" level=error msg="StopPodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" failed" error="failed to destroy network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.358577 kubelet[1950]: E0714 22:47:34.358540 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:34.358577 kubelet[1950]: E0714 22:47:34.358573 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2"} Jul 14 22:47:34.358654 kubelet[1950]: E0714 22:47:34.358593 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"8daac05b-2fb1-4779-a14d-bff0eae51684\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.358654 kubelet[1950]: E0714 22:47:34.358615 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"8daac05b-2fb1-4779-a14d-bff0eae51684\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-j7g99" podUID="8daac05b-2fb1-4779-a14d-bff0eae51684" Jul 14 22:47:34.358751 env[1204]: time="2025-07-14T22:47:34.358560092Z" level=error msg="StopPodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" failed" error="failed to destroy network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.358783 kubelet[1950]: E0714 22:47:34.358696 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:34.358783 kubelet[1950]: E0714 22:47:34.358716 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7"} Jul 14 22:47:34.358783 kubelet[1950]: E0714 22:47:34.358735 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"5ee219b8-da54-48a0-b525-adcb85b9c9a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.358783 kubelet[1950]: E0714 22:47:34.358751 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"5ee219b8-da54-48a0-b525-adcb85b9c9a7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-cbzv8" podUID="5ee219b8-da54-48a0-b525-adcb85b9c9a7" Jul 14 22:47:34.364307 env[1204]: time="2025-07-14T22:47:34.364258176Z" level=error msg="StopPodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" failed" error="failed to destroy network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.364453 kubelet[1950]: E0714 22:47:34.364420 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:34.364453 kubelet[1950]: E0714 22:47:34.364446 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2"} Jul 14 22:47:34.364649 kubelet[1950]: E0714 22:47:34.364473 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"77a73afb-9132-4fa9-83f4-003723533a93\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:34.364649 kubelet[1950]: E0714 22:47:34.364490 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"77a73afb-9132-4fa9-83f4-003723533a93\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-668d6bf9bc-sxff4" podUID="77a73afb-9132-4fa9-83f4-003723533a93" Jul 14 22:47:34.757463 env[1204]: time="2025-07-14T22:47:34.757415256Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6699bd5d6c-7hkp9,Uid:1d27edfd-ce40-43ee-9d20-1b732dbc94f6,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:34.809767 env[1204]: time="2025-07-14T22:47:34.809704752Z" level=error msg="Failed to destroy network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.810092 env[1204]: time="2025-07-14T22:47:34.810062574Z" level=error msg="encountered an error cleaning up failed sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.810148 env[1204]: time="2025-07-14T22:47:34.810113610Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6699bd5d6c-7hkp9,Uid:1d27edfd-ce40-43ee-9d20-1b732dbc94f6,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.810468 kubelet[1950]: E0714 22:47:34.810429 1950 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:34.810539 kubelet[1950]: E0714 22:47:34.810493 1950 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6699bd5d6c-7hkp9" Jul 14 22:47:34.810539 kubelet[1950]: E0714 22:47:34.810513 1950 kuberuntime_manager.go:1237] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6699bd5d6c-7hkp9" Jul 14 22:47:34.810595 kubelet[1950]: E0714 22:47:34.810564 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6699bd5d6c-7hkp9_calico-system(1d27edfd-ce40-43ee-9d20-1b732dbc94f6)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6699bd5d6c-7hkp9_calico-system(1d27edfd-ce40-43ee-9d20-1b732dbc94f6)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6699bd5d6c-7hkp9" podUID="1d27edfd-ce40-43ee-9d20-1b732dbc94f6" Jul 14 22:47:34.912015 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea-shm.mount: Deactivated successfully. Jul 14 22:47:35.304543 kubelet[1950]: I0714 22:47:35.304483 1950 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:35.304908 env[1204]: time="2025-07-14T22:47:35.304875011Z" level=info msg="StopPodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\"" Jul 14 22:47:35.327323 env[1204]: time="2025-07-14T22:47:35.327256767Z" level=error msg="StopPodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" failed" error="failed to destroy network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 22:47:35.327568 kubelet[1950]: E0714 22:47:35.327516 1950 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:35.327652 kubelet[1950]: E0714 22:47:35.327633 1950 kuberuntime_manager.go:1546] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea"} Jul 14 22:47:35.327693 kubelet[1950]: E0714 22:47:35.327681 1950 kuberuntime_manager.go:1146] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 22:47:35.327778 kubelet[1950]: E0714 22:47:35.327710 1950 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6699bd5d6c-7hkp9" podUID="1d27edfd-ce40-43ee-9d20-1b732dbc94f6" Jul 14 22:47:37.635000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.3:22-10.0.0.1:41296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:37.636113 systemd[1]: Started sshd@7-10.0.0.3:22-10.0.0.1:41296.service. Jul 14 22:47:37.637131 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 22:47:37.637260 kernel: audit: type=1130 audit(1752533257.635:1002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.3:22-10.0.0.1:41296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:37.699000 audit[3148]: USER_ACCT pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.699830 sshd[3148]: Accepted publickey for core from 10.0.0.1 port 41296 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:37.703557 kernel: audit: type=1101 audit(1752533257.699:1003): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.703683 kernel: audit: type=1103 audit(1752533257.703:1004): pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.703000 audit[3148]: CRED_ACQ pid=3148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.703991 sshd[3148]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:37.709552 kernel: audit: type=1006 audit(1752533257.703:1005): pid=3148 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=8 res=1 Jul 14 22:47:37.709623 kernel: audit: type=1300 audit(1752533257.703:1005): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd167d1f0 a2=3 a3=0 items=0 ppid=1 pid=3148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:37.703000 audit[3148]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd167d1f0 a2=3 a3=0 items=0 ppid=1 pid=3148 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:37.707995 systemd[1]: Started session-8.scope. Jul 14 22:47:37.708122 systemd-logind[1194]: New session 8 of user core. Jul 14 22:47:37.713179 kernel: audit: type=1327 audit(1752533257.703:1005): proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:37.703000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:37.711000 audit[3148]: USER_START pid=3148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.718520 kernel: audit: type=1105 audit(1752533257.711:1006): pid=3148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.718575 kernel: audit: type=1103 audit(1752533257.712:1007): pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:37.712000 audit[3150]: CRED_ACQ pid=3150 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:38.218481 sshd[3148]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:38.218000 audit[3148]: USER_END pid=3148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:38.220809 systemd[1]: sshd@7-10.0.0.3:22-10.0.0.1:41296.service: Deactivated successfully. Jul 14 22:47:38.221605 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 22:47:38.218000 audit[3148]: CRED_DISP pid=3148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:38.225153 systemd-logind[1194]: Session 8 logged out. Waiting for processes to exit. Jul 14 22:47:38.225966 systemd-logind[1194]: Removed session 8. Jul 14 22:47:38.228093 kernel: audit: type=1106 audit(1752533258.218:1008): pid=3148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:38.228142 kernel: audit: type=1104 audit(1752533258.218:1009): pid=3148 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:38.220000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-10.0.0.3:22-10.0.0.1:41296 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:41.730034 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4063254483.mount: Deactivated successfully. Jul 14 22:47:42.945618 env[1204]: time="2025-07-14T22:47:42.945566161Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:42.948167 env[1204]: time="2025-07-14T22:47:42.948135866Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:42.949929 env[1204]: time="2025-07-14T22:47:42.949905019Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:42.951853 env[1204]: time="2025-07-14T22:47:42.951821388Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:42.952037 env[1204]: time="2025-07-14T22:47:42.952013038Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 14 22:47:42.957816 env[1204]: time="2025-07-14T22:47:42.957769619Z" level=info msg="CreateContainer within sandbox \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 22:47:42.974404 env[1204]: time="2025-07-14T22:47:42.974353864Z" level=info msg="CreateContainer within sandbox \"56b78dc69ada2aee7b28a2363e39c4ebb080f4994ee684f486ddb4a65067dbc9\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"128567e160fd152ae979b106862e3f19992fa0a40a608fa14f5a1f082e67afac\"" Jul 14 22:47:42.974792 env[1204]: time="2025-07-14T22:47:42.974743856Z" level=info msg="StartContainer for \"128567e160fd152ae979b106862e3f19992fa0a40a608fa14f5a1f082e67afac\"" Jul 14 22:47:42.990995 systemd[1]: Started cri-containerd-128567e160fd152ae979b106862e3f19992fa0a40a608fa14f5a1f082e67afac.scope. Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.010902 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:47:43.010949 kernel: audit: type=1400 audit(1752533263.007:1011): avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fe630e8e848 items=0 ppid=2458 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:43.016987 kernel: audit: type=1300 audit(1752533263.007:1011): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7fe630e8e848 items=0 ppid=2458 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:43.017110 kernel: audit: type=1327 audit(1752533263.007:1011): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383536376531363066643135326165393739623130363836326533 Jul 14 22:47:43.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383536376531363066643135326165393739623130363836326533 Jul 14 22:47:43.030325 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.030446 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.037647 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.037743 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.041052 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.041089 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.046915 kernel: audit: type=1400 audit(1752533263.007:1012): avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.007000 audit: BPF prog-id=133 op=LOAD Jul 14 22:47:43.007000 audit[3171]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0003a0018 items=0 ppid=2458 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:43.007000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383536376531363066643135326165393739623130363836326533 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.011000 audit: BPF prog-id=134 op=LOAD Jul 14 22:47:43.011000 audit[3171]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0003a0068 items=0 ppid=2458 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:43.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383536376531363066643135326165393739623130363836326533 Jul 14 22:47:43.021000 audit: BPF prog-id=134 op=UNLOAD Jul 14 22:47:43.021000 audit: BPF prog-id=133 op=UNLOAD Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { perfmon } for pid=3171 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit[3171]: AVC avc: denied { bpf } for pid=3171 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:43.021000 audit: BPF prog-id=135 op=LOAD Jul 14 22:47:43.021000 audit[3171]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0003a00f8 items=0 ppid=2458 pid=3171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:43.021000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3132383536376531363066643135326165393739623130363836326533 Jul 14 22:47:43.220253 env[1204]: time="2025-07-14T22:47:43.219602356Z" level=info msg="StartContainer for \"128567e160fd152ae979b106862e3f19992fa0a40a608fa14f5a1f082e67afac\" returns successfully" Jul 14 22:47:43.222693 systemd[1]: Started sshd@8-10.0.0.3:22-10.0.0.1:40416.service. Jul 14 22:47:43.222000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.3:22-10.0.0.1:40416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:43.256509 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 22:47:43.256635 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 22:47:43.256000 audit[3202]: USER_ACCT pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:43.256820 sshd[3202]: Accepted publickey for core from 10.0.0.1 port 40416 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:43.256000 audit[3202]: CRED_ACQ pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:43.256000 audit[3202]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff4bf90a60 a2=3 a3=0 items=0 ppid=1 pid=3202 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:43.256000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:43.257844 sshd[3202]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:43.263343 systemd-logind[1194]: New session 9 of user core. Jul 14 22:47:43.263952 systemd[1]: Started session-9.scope. Jul 14 22:47:43.268000 audit[3202]: USER_START pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:43.269000 audit[3210]: CRED_ACQ pid=3210 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:43.338572 kubelet[1950]: I0714 22:47:43.338510 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-2zxfp" podStartSLOduration=1.731899951 podStartE2EDuration="22.338480511s" podCreationTimestamp="2025-07-14 22:47:21 +0000 UTC" firstStartedPulling="2025-07-14 22:47:22.346313392 +0000 UTC m=+25.388654186" lastFinishedPulling="2025-07-14 22:47:42.952893952 +0000 UTC m=+45.995234746" observedRunningTime="2025-07-14 22:47:43.337969642 +0000 UTC m=+46.380310446" watchObservedRunningTime="2025-07-14 22:47:43.338480511 +0000 UTC m=+46.380821315" Jul 14 22:47:43.339035 env[1204]: time="2025-07-14T22:47:43.338729990Z" level=info msg="StopPodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\"" Jul 14 22:47:43.426132 sshd[3202]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:43.426000 audit[3202]: USER_END pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:43.426000 audit[3202]: CRED_DISP pid=3202 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:43.428341 systemd-logind[1194]: Session 9 logged out. Waiting for processes to exit. Jul 14 22:47:43.428621 systemd[1]: sshd@8-10.0.0.3:22-10.0.0.1:40416.service: Deactivated successfully. Jul 14 22:47:43.429229 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 22:47:43.428000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-10.0.0.3:22-10.0.0.1:40416 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:43.430335 systemd-logind[1194]: Removed session 9. Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.410 [INFO][3247] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.410 [INFO][3247] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" iface="eth0" netns="/var/run/netns/cni-c118a78c-7751-53a2-f273-fa4c051d97e0" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.410 [INFO][3247] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" iface="eth0" netns="/var/run/netns/cni-c118a78c-7751-53a2-f273-fa4c051d97e0" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.410 [INFO][3247] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" iface="eth0" netns="/var/run/netns/cni-c118a78c-7751-53a2-f273-fa4c051d97e0" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.410 [INFO][3247] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.410 [INFO][3247] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.479 [INFO][3267] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.479 [INFO][3267] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.479 [INFO][3267] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.484 [WARNING][3267] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.484 [INFO][3267] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.485 [INFO][3267] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:43.489640 env[1204]: 2025-07-14 22:47:43.487 [INFO][3247] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:43.490331 env[1204]: time="2025-07-14T22:47:43.490278511Z" level=info msg="TearDown network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" successfully" Jul 14 22:47:43.490331 env[1204]: time="2025-07-14T22:47:43.490310632Z" level=info msg="StopPodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" returns successfully" Jul 14 22:47:43.541013 kubelet[1950]: I0714 22:47:43.540966 1950 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-jqr5p\" (UniqueName: \"kubernetes.io/projected/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-kube-api-access-jqr5p\") pod \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\" (UID: \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\") " Jul 14 22:47:43.541013 kubelet[1950]: I0714 22:47:43.541006 1950 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-backend-key-pair\") pod \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\" (UID: \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\") " Jul 14 22:47:43.541173 kubelet[1950]: I0714 22:47:43.541026 1950 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-ca-bundle\") pod \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\" (UID: \"1d27edfd-ce40-43ee-9d20-1b732dbc94f6\") " Jul 14 22:47:43.541306 kubelet[1950]: I0714 22:47:43.541275 1950 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "1d27edfd-ce40-43ee-9d20-1b732dbc94f6" (UID: "1d27edfd-ce40-43ee-9d20-1b732dbc94f6"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 14 22:47:43.543619 kubelet[1950]: I0714 22:47:43.543590 1950 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "1d27edfd-ce40-43ee-9d20-1b732dbc94f6" (UID: "1d27edfd-ce40-43ee-9d20-1b732dbc94f6"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 14 22:47:43.543792 kubelet[1950]: I0714 22:47:43.543773 1950 operation_generator.go:780] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-kube-api-access-jqr5p" (OuterVolumeSpecName: "kube-api-access-jqr5p") pod "1d27edfd-ce40-43ee-9d20-1b732dbc94f6" (UID: "1d27edfd-ce40-43ee-9d20-1b732dbc94f6"). InnerVolumeSpecName "kube-api-access-jqr5p". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 14 22:47:43.642154 kubelet[1950]: I0714 22:47:43.642126 1950 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 22:47:43.642154 kubelet[1950]: I0714 22:47:43.642142 1950 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-jqr5p\" (UniqueName: \"kubernetes.io/projected/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-kube-api-access-jqr5p\") on node \"localhost\" DevicePath \"\"" Jul 14 22:47:43.642154 kubelet[1950]: I0714 22:47:43.642150 1950 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1d27edfd-ce40-43ee-9d20-1b732dbc94f6-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 22:47:43.960413 systemd[1]: run-netns-cni\x2dc118a78c\x2d7751\x2d53a2\x2df273\x2dfa4c051d97e0.mount: Deactivated successfully. Jul 14 22:47:43.960496 systemd[1]: var-lib-kubelet-pods-1d27edfd\x2dce40\x2d43ee\x2d9d20\x2d1b732dbc94f6-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 22:47:43.960567 systemd[1]: var-lib-kubelet-pods-1d27edfd\x2dce40\x2d43ee\x2d9d20\x2d1b732dbc94f6-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2djqr5p.mount: Deactivated successfully. Jul 14 22:47:44.326909 systemd[1]: Removed slice kubepods-besteffort-pod1d27edfd_ce40_43ee_9d20_1b732dbc94f6.slice. Jul 14 22:47:44.343192 systemd[1]: run-containerd-runc-k8s.io-128567e160fd152ae979b106862e3f19992fa0a40a608fa14f5a1f082e67afac-runc.fdDKCr.mount: Deactivated successfully. Jul 14 22:47:44.368987 systemd[1]: Created slice kubepods-besteffort-pod13b05f3a_a6b1_4021_8dbd_ebd93f58f053.slice. Jul 14 22:47:44.446046 kubelet[1950]: I0714 22:47:44.446002 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bvgtt\" (UniqueName: \"kubernetes.io/projected/13b05f3a-a6b1-4021-8dbd-ebd93f58f053-kube-api-access-bvgtt\") pod \"whisker-78f947c8f-clm96\" (UID: \"13b05f3a-a6b1-4021-8dbd-ebd93f58f053\") " pod="calico-system/whisker-78f947c8f-clm96" Jul 14 22:47:44.446046 kubelet[1950]: I0714 22:47:44.446041 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/13b05f3a-a6b1-4021-8dbd-ebd93f58f053-whisker-ca-bundle\") pod \"whisker-78f947c8f-clm96\" (UID: \"13b05f3a-a6b1-4021-8dbd-ebd93f58f053\") " pod="calico-system/whisker-78f947c8f-clm96" Jul 14 22:47:44.446423 kubelet[1950]: I0714 22:47:44.446070 1950 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/13b05f3a-a6b1-4021-8dbd-ebd93f58f053-whisker-backend-key-pair\") pod \"whisker-78f947c8f-clm96\" (UID: \"13b05f3a-a6b1-4021-8dbd-ebd93f58f053\") " pod="calico-system/whisker-78f947c8f-clm96" Jul 14 22:47:44.513000 audit[3354]: AVC avc: denied { write } for pid=3354 comm="tee" name="fd" dev="proc" ino=25314 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.513000 audit[3354]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe43fe97d5 a2=241 a3=1b6 items=1 ppid=3322 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.513000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 22:47:44.513000 audit: PATH item=0 name="/dev/fd/63" inode=26625 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.513000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.521000 audit[3346]: AVC avc: denied { write } for pid=3346 comm="tee" name="fd" dev="proc" ino=24344 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.521000 audit[3346]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebd6c17d6 a2=241 a3=1b6 items=1 ppid=3324 pid=3346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.521000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 22:47:44.521000 audit: PATH item=0 name="/dev/fd/63" inode=23552 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.521000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.527000 audit[3366]: AVC avc: denied { write } for pid=3366 comm="tee" name="fd" dev="proc" ino=25321 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.530000 audit[3377]: AVC avc: denied { write } for pid=3377 comm="tee" name="fd" dev="proc" ino=25662 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.527000 audit[3366]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff88a9b7e7 a2=241 a3=1b6 items=1 ppid=3338 pid=3366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.527000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 22:47:44.527000 audit: PATH item=0 name="/dev/fd/63" inode=24337 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.527000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.530000 audit[3377]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffece6a47e5 a2=241 a3=1b6 items=1 ppid=3326 pid=3377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.530000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 22:47:44.530000 audit: PATH item=0 name="/dev/fd/63" inode=25652 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.530000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.542000 audit[3390]: AVC avc: denied { write } for pid=3390 comm="tee" name="fd" dev="proc" ino=25325 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.542000 audit[3390]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe5d29f7e6 a2=241 a3=1b6 items=1 ppid=3325 pid=3390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.542000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 22:47:44.542000 audit: PATH item=0 name="/dev/fd/63" inode=25659 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.542000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.566000 audit[3393]: AVC avc: denied { write } for pid=3393 comm="tee" name="fd" dev="proc" ino=24361 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.566000 audit[3393]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc420557e5 a2=241 a3=1b6 items=1 ppid=3335 pid=3393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.566000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 22:47:44.566000 audit: PATH item=0 name="/dev/fd/63" inode=24356 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.566000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.572000 audit[3405]: AVC avc: denied { write } for pid=3405 comm="tee" name="fd" dev="proc" ino=24365 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 22:47:44.572000 audit[3405]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe6fa947e5 a2=241 a3=1b6 items=1 ppid=3331 pid=3405 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.572000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 22:47:44.572000 audit: PATH item=0 name="/dev/fd/63" inode=26630 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 22:47:44.572000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 22:47:44.672007 env[1204]: time="2025-07-14T22:47:44.671968270Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-78f947c8f-clm96,Uid:13b05f3a-a6b1-4021-8dbd-ebd93f58f053,Namespace:calico-system,Attempt:0,}" Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit: BPF prog-id=136 op=LOAD Jul 14 22:47:44.703000 audit[3454]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff56199aa0 a2=98 a3=1fffffffffffffff items=0 ppid=3333 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.703000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:47:44.703000 audit: BPF prog-id=136 op=UNLOAD Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit: BPF prog-id=137 op=LOAD Jul 14 22:47:44.703000 audit[3454]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff56199980 a2=94 a3=3 items=0 ppid=3333 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.703000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:47:44.703000 audit: BPF prog-id=137 op=UNLOAD Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { bpf } for pid=3454 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit: BPF prog-id=138 op=LOAD Jul 14 22:47:44.703000 audit[3454]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff561999c0 a2=94 a3=7fff56199ba0 items=0 ppid=3333 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.703000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:47:44.703000 audit: BPF prog-id=138 op=UNLOAD Jul 14 22:47:44.703000 audit[3454]: AVC avc: denied { perfmon } for pid=3454 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.703000 audit[3454]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff56199a90 a2=50 a3=a000000085 items=0 ppid=3333 pid=3454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.703000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit: BPF prog-id=139 op=LOAD Jul 14 22:47:44.704000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc1796230 a2=98 a3=3 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.704000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.704000 audit: BPF prog-id=139 op=UNLOAD Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit: BPF prog-id=140 op=LOAD Jul 14 22:47:44.704000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffc1796020 a2=94 a3=54428f items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.704000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.704000 audit: BPF prog-id=140 op=UNLOAD Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.704000 audit: BPF prog-id=141 op=LOAD Jul 14 22:47:44.704000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffc1796050 a2=94 a3=2 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.704000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.704000 audit: BPF prog-id=141 op=UNLOAD Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit: BPF prog-id=142 op=LOAD Jul 14 22:47:44.806000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffc1795f10 a2=94 a3=1 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.806000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.806000 audit: BPF prog-id=142 op=UNLOAD Jul 14 22:47:44.806000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.806000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffc1795fe0 a2=50 a3=7fffc17960c0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.806000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc1795f20 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc1795f50 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc1795e60 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc1795f70 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc1795f50 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc1795f40 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc1795f70 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc1795f50 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc1795f70 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffc1795f40 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffc1795fb0 a2=28 a3=0 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffc1795d60 a2=50 a3=1 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit: BPF prog-id=143 op=LOAD Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffc1795d60 a2=94 a3=5 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit: BPF prog-id=143 op=UNLOAD Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffc1795e10 a2=50 a3=1 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffc1795f30 a2=4 a3=38 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.814000 audit[3455]: AVC avc: denied { confidentiality } for pid=3455 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:47:44.814000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffc1795f80 a2=94 a3=6 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.814000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { confidentiality } for pid=3455 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:47:44.815000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffc1795730 a2=94 a3=88 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.815000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { perfmon } for pid=3455 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { bpf } for pid=3455 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.815000 audit[3455]: AVC avc: denied { confidentiality } for pid=3455 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:47:44.815000 audit[3455]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffc1795730 a2=94 a3=88 items=0 ppid=3333 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.815000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit: BPF prog-id=144 op=LOAD Jul 14 22:47:44.821000 audit[3468]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc4d2c8b0 a2=98 a3=1999999999999999 items=0 ppid=3333 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.821000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:47:44.821000 audit: BPF prog-id=144 op=UNLOAD Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit: BPF prog-id=145 op=LOAD Jul 14 22:47:44.821000 audit[3468]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc4d2c790 a2=94 a3=ffff items=0 ppid=3333 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.821000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:47:44.821000 audit: BPF prog-id=145 op=UNLOAD Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { perfmon } for pid=3468 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit[3468]: AVC avc: denied { bpf } for pid=3468 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.821000 audit: BPF prog-id=146 op=LOAD Jul 14 22:47:44.821000 audit[3468]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffc4d2c7d0 a2=94 a3=7fffc4d2c9b0 items=0 ppid=3333 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.821000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 22:47:44.822000 audit: BPF prog-id=146 op=UNLOAD Jul 14 22:47:44.867943 systemd-networkd[1029]: vxlan.calico: Link UP Jul 14 22:47:44.867952 systemd-networkd[1029]: vxlan.calico: Gained carrier Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.880000 audit: BPF prog-id=147 op=LOAD Jul 14 22:47:44.880000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2d1cce10 a2=98 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.880000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit: BPF prog-id=147 op=UNLOAD Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit: BPF prog-id=148 op=LOAD Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2d1ccc20 a2=94 a3=54428f items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit: BPF prog-id=148 op=UNLOAD Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit: BPF prog-id=149 op=LOAD Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe2d1ccc50 a2=94 a3=2 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit: BPF prog-id=149 op=UNLOAD Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2d1ccb20 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2d1ccb50 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2d1cca60 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2d1ccb70 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2d1ccb50 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2d1ccb40 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2d1ccb70 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2d1ccb50 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2d1ccb70 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe2d1ccb40 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffe2d1ccbb0 a2=28 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit: BPF prog-id=150 op=LOAD Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2d1cca20 a2=94 a3=0 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit: BPF prog-id=150 op=UNLOAD Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffe2d1cca10 a2=50 a3=2800 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffe2d1cca10 a2=50 a3=2800 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit: BPF prog-id=151 op=LOAD Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2d1cc230 a2=94 a3=2 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.881000 audit: BPF prog-id=151 op=UNLOAD Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { perfmon } for pid=3498 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit[3498]: AVC avc: denied { bpf } for pid=3498 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.881000 audit: BPF prog-id=152 op=LOAD Jul 14 22:47:44.881000 audit[3498]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe2d1cc330 a2=94 a3=30 items=0 ppid=3333 pid=3498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.881000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit: BPF prog-id=153 op=LOAD Jul 14 22:47:44.885000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff0b9e4340 a2=98 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.885000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.885000 audit: BPF prog-id=153 op=UNLOAD Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit: BPF prog-id=154 op=LOAD Jul 14 22:47:44.885000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff0b9e4130 a2=94 a3=54428f items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.885000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.885000 audit: BPF prog-id=154 op=UNLOAD Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.885000 audit: BPF prog-id=155 op=LOAD Jul 14 22:47:44.885000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff0b9e4160 a2=94 a3=2 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.885000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.885000 audit: BPF prog-id=155 op=UNLOAD Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit: BPF prog-id=156 op=LOAD Jul 14 22:47:44.986000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff0b9e4020 a2=94 a3=1 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.986000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.986000 audit: BPF prog-id=156 op=UNLOAD Jul 14 22:47:44.986000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.986000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff0b9e40f0 a2=50 a3=7fff0b9e41d0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.986000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0b9e4030 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff0b9e4060 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff0b9e3f70 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0b9e4080 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0b9e4060 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0b9e4050 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0b9e4080 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff0b9e4060 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff0b9e4080 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff0b9e4050 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff0b9e40c0 a2=28 a3=0 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff0b9e3e70 a2=50 a3=1 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit: BPF prog-id=157 op=LOAD Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff0b9e3e70 a2=94 a3=5 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit: BPF prog-id=157 op=UNLOAD Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff0b9e3f20 a2=50 a3=1 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff0b9e4040 a2=4 a3=38 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.995000 audit[3500]: AVC avc: denied { confidentiality } for pid=3500 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:47:44.995000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff0b9e4090 a2=94 a3=6 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.995000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { confidentiality } for pid=3500 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:47:44.996000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff0b9e3840 a2=94 a3=88 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.996000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { perfmon } for pid=3500 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { confidentiality } for pid=3500 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 22:47:44.996000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff0b9e3840 a2=94 a3=88 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.996000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff0b9e5270 a2=10 a3=208 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.996000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff0b9e5110 a2=10 a3=3 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.996000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff0b9e50b0 a2=10 a3=3 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.996000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:44.996000 audit[3500]: AVC avc: denied { bpf } for pid=3500 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:44.996000 audit[3500]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff0b9e50b0 a2=10 a3=7 items=0 ppid=3333 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:44.996000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 22:47:45.003000 audit: BPF prog-id=152 op=UNLOAD Jul 14 22:47:45.011674 systemd-networkd[1029]: calia7a5d505b31: Link UP Jul 14 22:47:45.013042 systemd-networkd[1029]: calia7a5d505b31: Gained carrier Jul 14 22:47:45.013649 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calia7a5d505b31: link becomes ready Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.719 [INFO][3437] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--78f947c8f--clm96-eth0 whisker-78f947c8f- calico-system 13b05f3a-a6b1-4021-8dbd-ebd93f58f053 978 0 2025-07-14 22:47:44 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:78f947c8f projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-78f947c8f-clm96 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calia7a5d505b31 [] [] }} ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.719 [INFO][3437] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.745 [INFO][3459] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" HandleID="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Workload="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.745 [INFO][3459] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" HandleID="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Workload="localhost-k8s-whisker--78f947c8f--clm96-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001a4400), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-78f947c8f-clm96", "timestamp":"2025-07-14 22:47:44.745401826 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.745 [INFO][3459] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.745 [INFO][3459] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.745 [INFO][3459] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.751 [INFO][3459] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.754 [INFO][3459] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.757 [INFO][3459] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.759 [INFO][3459] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.760 [INFO][3459] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.760 [INFO][3459] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.761 [INFO][3459] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8 Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:44.880 [INFO][3459] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:45.006 [INFO][3459] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:45.007 [INFO][3459] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" host="localhost" Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:45.007 [INFO][3459] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:45.025549 env[1204]: 2025-07-14 22:47:45.007 [INFO][3459] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" HandleID="k8s-pod-network.5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Workload="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.026282 env[1204]: 2025-07-14 22:47:45.009 [INFO][3437] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--78f947c8f--clm96-eth0", GenerateName:"whisker-78f947c8f-", Namespace:"calico-system", SelfLink:"", UID:"13b05f3a-a6b1-4021-8dbd-ebd93f58f053", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"78f947c8f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-78f947c8f-clm96", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia7a5d505b31", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:45.026282 env[1204]: 2025-07-14 22:47:45.009 [INFO][3437] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.026282 env[1204]: 2025-07-14 22:47:45.009 [INFO][3437] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calia7a5d505b31 ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.026282 env[1204]: 2025-07-14 22:47:45.013 [INFO][3437] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.026282 env[1204]: 2025-07-14 22:47:45.013 [INFO][3437] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--78f947c8f--clm96-eth0", GenerateName:"whisker-78f947c8f-", Namespace:"calico-system", SelfLink:"", UID:"13b05f3a-a6b1-4021-8dbd-ebd93f58f053", ResourceVersion:"978", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 44, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"78f947c8f", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8", Pod:"whisker-78f947c8f-clm96", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calia7a5d505b31", MAC:"ba:46:31:cd:30:4d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:45.026282 env[1204]: 2025-07-14 22:47:45.021 [INFO][3437] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8" Namespace="calico-system" Pod="whisker-78f947c8f-clm96" WorkloadEndpoint="localhost-k8s-whisker--78f947c8f--clm96-eth0" Jul 14 22:47:45.029262 env[1204]: time="2025-07-14T22:47:45.029224777Z" level=info msg="StopPodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\"" Jul 14 22:47:45.030560 kubelet[1950]: I0714 22:47:45.030378 1950 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1d27edfd-ce40-43ee-9d20-1b732dbc94f6" path="/var/lib/kubelet/pods/1d27edfd-ce40-43ee-9d20-1b732dbc94f6/volumes" Jul 14 22:47:45.035841 env[1204]: time="2025-07-14T22:47:45.035767009Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:45.035985 env[1204]: time="2025-07-14T22:47:45.035962236Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:45.036077 env[1204]: time="2025-07-14T22:47:45.036053848Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:45.036458 env[1204]: time="2025-07-14T22:47:45.036380912Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8 pid=3536 runtime=io.containerd.runc.v2 Jul 14 22:47:45.059569 systemd[1]: Started cri-containerd-5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8.scope. Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.070000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit: BPF prog-id=158 op=LOAD Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=3536 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653939613834336636626233656534306263353233333532616664 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=3536 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653939613834336636626233656534306263353233333532616664 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit: BPF prog-id=159 op=LOAD Jul 14 22:47:45.071000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00027e6b0 items=0 ppid=3536 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653939613834336636626233656534306263353233333532616664 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit: BPF prog-id=160 op=LOAD Jul 14 22:47:45.071000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00027e6f8 items=0 ppid=3536 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653939613834336636626233656534306263353233333532616664 Jul 14 22:47:45.071000 audit: BPF prog-id=160 op=UNLOAD Jul 14 22:47:45.071000 audit: BPF prog-id=159 op=UNLOAD Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { perfmon } for pid=3556 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit[3556]: AVC avc: denied { bpf } for pid=3556 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.071000 audit: BPF prog-id=161 op=LOAD Jul 14 22:47:45.071000 audit[3556]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00027eb08 items=0 ppid=3536 pid=3556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.071000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561653939613834336636626233656534306263353233333532616664 Jul 14 22:47:45.072812 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:45.076000 audit[3583]: NETFILTER_CFG table=nat:101 family=2 entries=15 op=nft_register_chain pid=3583 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:45.076000 audit[3583]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffdc1d8ee60 a2=0 a3=7ffdc1d8ee4c items=0 ppid=3333 pid=3583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.076000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:45.076000 audit[3586]: NETFILTER_CFG table=mangle:102 family=2 entries=16 op=nft_register_chain pid=3586 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:45.076000 audit[3586]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff581502c0 a2=0 a3=7fff581502ac items=0 ppid=3333 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.076000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:45.082000 audit[3587]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3587 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:45.082000 audit[3587]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffcf57a1910 a2=0 a3=7ffcf57a18fc items=0 ppid=3333 pid=3587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.082000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:45.088000 audit[3582]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3582 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:45.088000 audit[3582]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffee0398cf0 a2=0 a3=7ffee0398cdc items=0 ppid=3333 pid=3582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.088000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:45.096477 env[1204]: time="2025-07-14T22:47:45.096423315Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-78f947c8f-clm96,Uid:13b05f3a-a6b1-4021-8dbd-ebd93f58f053,Namespace:calico-system,Attempt:0,} returns sandbox id \"5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8\"" Jul 14 22:47:45.098582 env[1204]: time="2025-07-14T22:47:45.098511194Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.099 [INFO][3544] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.099 [INFO][3544] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" iface="eth0" netns="/var/run/netns/cni-3f798c6a-d8de-7a14-f5af-757bb9a3368b" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.099 [INFO][3544] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" iface="eth0" netns="/var/run/netns/cni-3f798c6a-d8de-7a14-f5af-757bb9a3368b" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.099 [INFO][3544] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" iface="eth0" netns="/var/run/netns/cni-3f798c6a-d8de-7a14-f5af-757bb9a3368b" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.099 [INFO][3544] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.099 [INFO][3544] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.119 [INFO][3599] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.119 [INFO][3599] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.119 [INFO][3599] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.129 [WARNING][3599] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.130 [INFO][3599] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.131 [INFO][3599] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:45.135084 env[1204]: 2025-07-14 22:47:45.133 [INFO][3544] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:45.116000 audit[3608]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3608 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:45.135558 env[1204]: time="2025-07-14T22:47:45.135224188Z" level=info msg="TearDown network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" successfully" Jul 14 22:47:45.135558 env[1204]: time="2025-07-14T22:47:45.135254485Z" level=info msg="StopPodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" returns successfully" Jul 14 22:47:45.135872 env[1204]: time="2025-07-14T22:47:45.135840416Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f498f6dc-7zpk5,Uid:81e1b119-f229-4f94-b2d8-c7b7a938e151,Namespace:calico-system,Attempt:1,}" Jul 14 22:47:45.116000 audit[3608]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffd400a5650 a2=0 a3=7ffd400a563c items=0 ppid=3333 pid=3608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.116000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:45.137229 systemd[1]: run-netns-cni\x2d3f798c6a\x2dd8de\x2d7a14\x2df5af\x2d757bb9a3368b.mount: Deactivated successfully. Jul 14 22:47:45.223573 systemd-networkd[1029]: calif0870779e19: Link UP Jul 14 22:47:45.224733 systemd-networkd[1029]: calif0870779e19: Gained carrier Jul 14 22:47:45.228870 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif0870779e19: link becomes ready Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.176 [INFO][3616] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0 calico-kube-controllers-f498f6dc- calico-system 81e1b119-f229-4f94-b2d8-c7b7a938e151 989 0 2025-07-14 22:47:21 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:f498f6dc projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-f498f6dc-7zpk5 eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] calif0870779e19 [] [] }} ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.176 [INFO][3616] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.197 [INFO][3630] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" HandleID="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.198 [INFO][3630] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" HandleID="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00011b240), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-f498f6dc-7zpk5", "timestamp":"2025-07-14 22:47:45.197912959 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.198 [INFO][3630] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.198 [INFO][3630] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.198 [INFO][3630] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.203 [INFO][3630] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.206 [INFO][3630] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.209 [INFO][3630] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.210 [INFO][3630] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.211 [INFO][3630] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.211 [INFO][3630] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.212 [INFO][3630] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7 Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.215 [INFO][3630] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.219 [INFO][3630] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.219 [INFO][3630] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" host="localhost" Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.219 [INFO][3630] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:45.234964 env[1204]: 2025-07-14 22:47:45.219 [INFO][3630] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" HandleID="k8s-pod-network.9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.235492 env[1204]: 2025-07-14 22:47:45.221 [INFO][3616] cni-plugin/k8s.go 418: Populated endpoint ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0", GenerateName:"calico-kube-controllers-f498f6dc-", Namespace:"calico-system", SelfLink:"", UID:"81e1b119-f229-4f94-b2d8-c7b7a938e151", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f498f6dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-f498f6dc-7zpk5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif0870779e19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:45.235492 env[1204]: 2025-07-14 22:47:45.221 [INFO][3616] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.235492 env[1204]: 2025-07-14 22:47:45.221 [INFO][3616] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif0870779e19 ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.235492 env[1204]: 2025-07-14 22:47:45.224 [INFO][3616] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.235492 env[1204]: 2025-07-14 22:47:45.225 [INFO][3616] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0", GenerateName:"calico-kube-controllers-f498f6dc-", Namespace:"calico-system", SelfLink:"", UID:"81e1b119-f229-4f94-b2d8-c7b7a938e151", ResourceVersion:"989", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f498f6dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7", Pod:"calico-kube-controllers-f498f6dc-7zpk5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif0870779e19", MAC:"22:2d:64:e2:90:69", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:45.235492 env[1204]: 2025-07-14 22:47:45.232 [INFO][3616] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7" Namespace="calico-system" Pod="calico-kube-controllers-f498f6dc-7zpk5" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:45.242000 audit[3652]: NETFILTER_CFG table=filter:106 family=2 entries=36 op=nft_register_chain pid=3652 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:45.242000 audit[3652]: SYSCALL arch=c000003e syscall=46 success=yes exit=19576 a0=3 a1=7ffd661c68a0 a2=0 a3=7ffd661c688c items=0 ppid=3333 pid=3652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.242000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:45.243341 env[1204]: time="2025-07-14T22:47:45.243058354Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:45.243341 env[1204]: time="2025-07-14T22:47:45.243098440Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:45.243341 env[1204]: time="2025-07-14T22:47:45.243108098Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:45.243680 env[1204]: time="2025-07-14T22:47:45.243629136Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7 pid=3656 runtime=io.containerd.runc.v2 Jul 14 22:47:45.254910 systemd[1]: Started cri-containerd-9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7.scope. Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.265000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit: BPF prog-id=162 op=LOAD Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3656 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396132323233323736353130623235356665346337396465316661 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3656 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396132323233323736353130623235356665346337396465316661 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit: BPF prog-id=163 op=LOAD Jul 14 22:47:45.266000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000227720 items=0 ppid=3656 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396132323233323736353130623235356665346337396465316661 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit: BPF prog-id=164 op=LOAD Jul 14 22:47:45.266000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000227768 items=0 ppid=3656 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396132323233323736353130623235356665346337396465316661 Jul 14 22:47:45.266000 audit: BPF prog-id=164 op=UNLOAD Jul 14 22:47:45.266000 audit: BPF prog-id=163 op=UNLOAD Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { perfmon } for pid=3665 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit[3665]: AVC avc: denied { bpf } for pid=3665 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:45.266000 audit: BPF prog-id=165 op=LOAD Jul 14 22:47:45.266000 audit[3665]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000227b78 items=0 ppid=3656 pid=3665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:45.266000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965396132323233323736353130623235356665346337396465316661 Jul 14 22:47:45.267868 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:45.290003 env[1204]: time="2025-07-14T22:47:45.289959887Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-f498f6dc-7zpk5,Uid:81e1b119-f229-4f94-b2d8-c7b7a938e151,Namespace:calico-system,Attempt:1,} returns sandbox id \"9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7\"" Jul 14 22:47:45.970110 systemd-networkd[1029]: vxlan.calico: Gained IPv6LL Jul 14 22:47:46.028229 env[1204]: time="2025-07-14T22:47:46.028172349Z" level=info msg="StopPodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\"" Jul 14 22:47:46.028849 env[1204]: time="2025-07-14T22:47:46.028808563Z" level=info msg="StopPodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\"" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.070 [INFO][3714] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.070 [INFO][3714] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" iface="eth0" netns="/var/run/netns/cni-75f2a747-2301-e645-e016-0f1165d8ee64" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.070 [INFO][3714] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" iface="eth0" netns="/var/run/netns/cni-75f2a747-2301-e645-e016-0f1165d8ee64" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.070 [INFO][3714] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" iface="eth0" netns="/var/run/netns/cni-75f2a747-2301-e645-e016-0f1165d8ee64" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.070 [INFO][3714] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.070 [INFO][3714] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.089 [INFO][3731] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.089 [INFO][3731] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.089 [INFO][3731] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.094 [WARNING][3731] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.094 [INFO][3731] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.095 [INFO][3731] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:46.098477 env[1204]: 2025-07-14 22:47:46.096 [INFO][3714] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:46.098905 env[1204]: time="2025-07-14T22:47:46.098621176Z" level=info msg="TearDown network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" successfully" Jul 14 22:47:46.098905 env[1204]: time="2025-07-14T22:47:46.098654388Z" level=info msg="StopPodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" returns successfully" Jul 14 22:47:46.099231 env[1204]: time="2025-07-14T22:47:46.099203099Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-7dl4r,Uid:9b1f43e8-e77f-43a1-ba40-772e672f0eef,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:47:46.100796 systemd[1]: run-netns-cni\x2d75f2a747\x2d2301\x2de645\x2de016\x2d0f1165d8ee64.mount: Deactivated successfully. Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.070 [INFO][3715] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.070 [INFO][3715] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" iface="eth0" netns="/var/run/netns/cni-03d1d0fa-9631-c37d-0f8f-41463ece31ee" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.070 [INFO][3715] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" iface="eth0" netns="/var/run/netns/cni-03d1d0fa-9631-c37d-0f8f-41463ece31ee" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.070 [INFO][3715] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" iface="eth0" netns="/var/run/netns/cni-03d1d0fa-9631-c37d-0f8f-41463ece31ee" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.071 [INFO][3715] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.071 [INFO][3715] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.096 [INFO][3730] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.096 [INFO][3730] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.096 [INFO][3730] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.101 [WARNING][3730] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.101 [INFO][3730] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.102 [INFO][3730] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:46.106396 env[1204]: 2025-07-14 22:47:46.104 [INFO][3715] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:46.109058 env[1204]: time="2025-07-14T22:47:46.106486741Z" level=info msg="TearDown network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" successfully" Jul 14 22:47:46.109058 env[1204]: time="2025-07-14T22:47:46.106512088Z" level=info msg="StopPodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" returns successfully" Jul 14 22:47:46.109058 env[1204]: time="2025-07-14T22:47:46.107029120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-j7g99,Uid:8daac05b-2fb1-4779-a14d-bff0eae51684,Namespace:calico-system,Attempt:1,}" Jul 14 22:47:46.108791 systemd[1]: run-netns-cni\x2d03d1d0fa\x2d9631\x2dc37d\x2d0f8f\x2d41463ece31ee.mount: Deactivated successfully. Jul 14 22:47:46.205488 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:47:46.205606 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calida200756d33: link becomes ready Jul 14 22:47:46.203074 systemd-networkd[1029]: calida200756d33: Link UP Jul 14 22:47:46.205849 systemd-networkd[1029]: calida200756d33: Gained carrier Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.149 [INFO][3744] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0 calico-apiserver-66666fb6d- calico-apiserver 9b1f43e8-e77f-43a1-ba40-772e672f0eef 999 0 2025-07-14 22:47:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66666fb6d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-66666fb6d-7dl4r eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calida200756d33 [] [] }} ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.150 [INFO][3744] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.171 [INFO][3774] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" HandleID="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.171 [INFO][3774] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" HandleID="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325490), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-66666fb6d-7dl4r", "timestamp":"2025-07-14 22:47:46.171695442 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.171 [INFO][3774] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.171 [INFO][3774] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.172 [INFO][3774] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.177 [INFO][3774] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.181 [INFO][3774] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.185 [INFO][3774] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.187 [INFO][3774] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.188 [INFO][3774] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.188 [INFO][3774] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.189 [INFO][3774] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4 Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.193 [INFO][3774] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.197 [INFO][3774] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.197 [INFO][3774] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" host="localhost" Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.197 [INFO][3774] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:46.216385 env[1204]: 2025-07-14 22:47:46.197 [INFO][3774] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" HandleID="k8s-pod-network.a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.216929 env[1204]: 2025-07-14 22:47:46.199 [INFO][3744] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b1f43e8-e77f-43a1-ba40-772e672f0eef", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-66666fb6d-7dl4r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calida200756d33", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:46.216929 env[1204]: 2025-07-14 22:47:46.199 [INFO][3744] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.216929 env[1204]: 2025-07-14 22:47:46.199 [INFO][3744] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calida200756d33 ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.216929 env[1204]: 2025-07-14 22:47:46.205 [INFO][3744] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.216929 env[1204]: 2025-07-14 22:47:46.205 [INFO][3744] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b1f43e8-e77f-43a1-ba40-772e672f0eef", ResourceVersion:"999", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4", Pod:"calico-apiserver-66666fb6d-7dl4r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calida200756d33", MAC:"a2:58:79:11:04:66", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:46.216929 env[1204]: 2025-07-14 22:47:46.213 [INFO][3744] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-7dl4r" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:46.222000 audit[3802]: NETFILTER_CFG table=filter:107 family=2 entries=54 op=nft_register_chain pid=3802 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:46.222000 audit[3802]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7ffc2c96f100 a2=0 a3=7ffc2c96f0ec items=0 ppid=3333 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.222000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:46.224873 env[1204]: time="2025-07-14T22:47:46.224788048Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:46.225044 env[1204]: time="2025-07-14T22:47:46.224850836Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:46.225044 env[1204]: time="2025-07-14T22:47:46.224867717Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:46.225044 env[1204]: time="2025-07-14T22:47:46.225009744Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4 pid=3807 runtime=io.containerd.runc.v2 Jul 14 22:47:46.225666 systemd-networkd[1029]: calia7a5d505b31: Gained IPv6LL Jul 14 22:47:46.235122 systemd[1]: Started cri-containerd-a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4.scope. Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit: BPF prog-id=166 op=LOAD Jul 14 22:47:46.247000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.247000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3807 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.247000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636239366163303863396238663566303566373231643362646531 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=3807 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636239366163303863396238663566303566373231643362646531 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit: BPF prog-id=167 op=LOAD Jul 14 22:47:46.248000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003bc820 items=0 ppid=3807 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636239366163303863396238663566303566373231643362646531 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit: BPF prog-id=168 op=LOAD Jul 14 22:47:46.248000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003bc868 items=0 ppid=3807 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636239366163303863396238663566303566373231643362646531 Jul 14 22:47:46.248000 audit: BPF prog-id=168 op=UNLOAD Jul 14 22:47:46.248000 audit: BPF prog-id=167 op=UNLOAD Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { perfmon } for pid=3815 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit[3815]: AVC avc: denied { bpf } for pid=3815 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.248000 audit: BPF prog-id=169 op=LOAD Jul 14 22:47:46.248000 audit[3815]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003bcc78 items=0 ppid=3807 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.248000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6134636239366163303863396238663566303566373231643362646531 Jul 14 22:47:46.249519 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:46.271622 env[1204]: time="2025-07-14T22:47:46.271582280Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-7dl4r,Uid:9b1f43e8-e77f-43a1-ba40-772e672f0eef,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4\"" Jul 14 22:47:46.289741 systemd-networkd[1029]: calif0870779e19: Gained IPv6LL Jul 14 22:47:46.306102 systemd-networkd[1029]: cali1c5c775a5ba: Link UP Jul 14 22:47:46.307887 systemd-networkd[1029]: cali1c5c775a5ba: Gained carrier Jul 14 22:47:46.308549 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1c5c775a5ba: link becomes ready Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.153 [INFO][3756] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--j7g99-eth0 goldmane-768f4c5c69- calico-system 8daac05b-2fb1-4779-a14d-bff0eae51684 1000 0 2025-07-14 22:47:20 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-j7g99 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali1c5c775a5ba [] [] }} ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.153 [INFO][3756] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.177 [INFO][3778] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" HandleID="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.177 [INFO][3778] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" HandleID="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00034d5f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-j7g99", "timestamp":"2025-07-14 22:47:46.177489128 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.177 [INFO][3778] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.197 [INFO][3778] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.197 [INFO][3778] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.278 [INFO][3778] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.282 [INFO][3778] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.289 [INFO][3778] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.290 [INFO][3778] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.292 [INFO][3778] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.292 [INFO][3778] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.293 [INFO][3778] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80 Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.296 [INFO][3778] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.300 [INFO][3778] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.300 [INFO][3778] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" host="localhost" Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.300 [INFO][3778] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:46.319419 env[1204]: 2025-07-14 22:47:46.300 [INFO][3778] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" HandleID="k8s-pod-network.64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.320011 env[1204]: 2025-07-14 22:47:46.302 [INFO][3756] cni-plugin/k8s.go 418: Populated endpoint ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--j7g99-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8daac05b-2fb1-4779-a14d-bff0eae51684", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-j7g99", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1c5c775a5ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:46.320011 env[1204]: 2025-07-14 22:47:46.302 [INFO][3756] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.320011 env[1204]: 2025-07-14 22:47:46.302 [INFO][3756] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1c5c775a5ba ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.320011 env[1204]: 2025-07-14 22:47:46.308 [INFO][3756] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.320011 env[1204]: 2025-07-14 22:47:46.308 [INFO][3756] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--j7g99-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8daac05b-2fb1-4779-a14d-bff0eae51684", ResourceVersion:"1000", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80", Pod:"goldmane-768f4c5c69-j7g99", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1c5c775a5ba", MAC:"22:79:e2:41:91:e2", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:46.320011 env[1204]: 2025-07-14 22:47:46.316 [INFO][3756] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80" Namespace="calico-system" Pod="goldmane-768f4c5c69-j7g99" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:46.333217 env[1204]: time="2025-07-14T22:47:46.333157270Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:46.333388 env[1204]: time="2025-07-14T22:47:46.333192717Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:46.333388 env[1204]: time="2025-07-14T22:47:46.333202725Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:46.333479 env[1204]: time="2025-07-14T22:47:46.333353097Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80 pid=3859 runtime=io.containerd.runc.v2 Jul 14 22:47:46.334000 audit[3851]: NETFILTER_CFG table=filter:108 family=2 entries=52 op=nft_register_chain pid=3851 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:46.334000 audit[3851]: SYSCALL arch=c000003e syscall=46 success=yes exit=27556 a0=3 a1=7ffe187fac90 a2=0 a3=7ffe187fac7c items=0 ppid=3333 pid=3851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.334000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:46.343130 systemd[1]: Started cri-containerd-64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80.scope. Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit: BPF prog-id=170 op=LOAD Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=3859 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646634633339383664636363373465663533396136313466636533 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=3859 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646634633339383664636363373465663533396136313466636533 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.358000 audit: BPF prog-id=171 op=LOAD Jul 14 22:47:46.358000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001999d8 a2=78 a3=c0003e03a0 items=0 ppid=3859 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.358000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646634633339383664636363373465663533396136313466636533 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit: BPF prog-id=172 op=LOAD Jul 14 22:47:46.359000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000199770 a2=78 a3=c0003e03e8 items=0 ppid=3859 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646634633339383664636363373465663533396136313466636533 Jul 14 22:47:46.359000 audit: BPF prog-id=172 op=UNLOAD Jul 14 22:47:46.359000 audit: BPF prog-id=171 op=UNLOAD Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { perfmon } for pid=3870 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit[3870]: AVC avc: denied { bpf } for pid=3870 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.359000 audit: BPF prog-id=173 op=LOAD Jul 14 22:47:46.359000 audit[3870]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000199c30 a2=78 a3=c0003e07f8 items=0 ppid=3859 pid=3870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.359000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3634646634633339383664636363373465663533396136313466636533 Jul 14 22:47:46.360495 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:46.381075 env[1204]: time="2025-07-14T22:47:46.381041008Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-j7g99,Uid:8daac05b-2fb1-4779-a14d-bff0eae51684,Namespace:calico-system,Attempt:1,} returns sandbox id \"64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80\"" Jul 14 22:47:46.893400 env[1204]: time="2025-07-14T22:47:46.893342636Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:46.895236 env[1204]: time="2025-07-14T22:47:46.895206866Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:46.896732 env[1204]: time="2025-07-14T22:47:46.896713845Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:46.898149 env[1204]: time="2025-07-14T22:47:46.898106088Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:46.898601 env[1204]: time="2025-07-14T22:47:46.898571681Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 14 22:47:46.899851 env[1204]: time="2025-07-14T22:47:46.899827460Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 22:47:46.900466 env[1204]: time="2025-07-14T22:47:46.900440550Z" level=info msg="CreateContainer within sandbox \"5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 22:47:46.912724 env[1204]: time="2025-07-14T22:47:46.912683102Z" level=info msg="CreateContainer within sandbox \"5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"1a0b254a0634d795aec2d14afc2e6b434809b5a997400581f7907e582911bbba\"" Jul 14 22:47:46.913042 env[1204]: time="2025-07-14T22:47:46.913016308Z" level=info msg="StartContainer for \"1a0b254a0634d795aec2d14afc2e6b434809b5a997400581f7907e582911bbba\"" Jul 14 22:47:46.925756 systemd[1]: Started cri-containerd-1a0b254a0634d795aec2d14afc2e6b434809b5a997400581f7907e582911bbba.scope. Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.939000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit: BPF prog-id=174 op=LOAD Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3536 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161306232353461303633346437393561656332643134616663326536 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3536 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161306232353461303633346437393561656332643134616663326536 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit: BPF prog-id=175 op=LOAD Jul 14 22:47:46.940000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002888c0 items=0 ppid=3536 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161306232353461303633346437393561656332643134616663326536 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit: BPF prog-id=176 op=LOAD Jul 14 22:47:46.940000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000288908 items=0 ppid=3536 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161306232353461303633346437393561656332643134616663326536 Jul 14 22:47:46.940000 audit: BPF prog-id=176 op=UNLOAD Jul 14 22:47:46.940000 audit: BPF prog-id=175 op=UNLOAD Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { perfmon } for pid=3904 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit[3904]: AVC avc: denied { bpf } for pid=3904 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:46.940000 audit: BPF prog-id=177 op=LOAD Jul 14 22:47:46.940000 audit[3904]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000288d18 items=0 ppid=3536 pid=3904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:46.940000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161306232353461303633346437393561656332643134616663326536 Jul 14 22:47:47.028705 env[1204]: time="2025-07-14T22:47:47.028659139Z" level=info msg="StopPodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\"" Jul 14 22:47:47.029280 env[1204]: time="2025-07-14T22:47:47.028732176Z" level=info msg="StopPodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\"" Jul 14 22:47:47.029341 env[1204]: time="2025-07-14T22:47:47.028793261Z" level=info msg="StopPodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\"" Jul 14 22:47:47.308000 audit[3915]: AVC avc: denied { search } for pid=3915 comm="nginx" name="crypto" dev="proc" ino=26207 scontext=system_u:system_r:svirt_lxc_net_t:s0:c502,c967 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 22:47:47.308000 audit[3915]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f0645908728 a2=0 a3=0 items=0 ppid=3536 pid=3915 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c502,c967 key=(null) Jul 14 22:47:47.308000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 22:47:47.310347 env[1204]: time="2025-07-14T22:47:47.310318989Z" level=info msg="StartContainer for \"1a0b254a0634d795aec2d14afc2e6b434809b5a997400581f7907e582911bbba\" returns successfully" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.333 [INFO][3964] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.333 [INFO][3964] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" iface="eth0" netns="/var/run/netns/cni-d81a37c6-a460-a708-e8f1-87011687c408" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.333 [INFO][3964] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" iface="eth0" netns="/var/run/netns/cni-d81a37c6-a460-a708-e8f1-87011687c408" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.333 [INFO][3964] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" iface="eth0" netns="/var/run/netns/cni-d81a37c6-a460-a708-e8f1-87011687c408" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.333 [INFO][3964] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.333 [INFO][3964] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.358 [INFO][4000] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.359 [INFO][4000] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.359 [INFO][4000] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.366 [WARNING][4000] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.366 [INFO][4000] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.367 [INFO][4000] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:47.370930 env[1204]: 2025-07-14 22:47:47.369 [INFO][3964] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:47.373873 systemd[1]: run-netns-cni\x2dd81a37c6\x2da460\x2da708\x2de8f1\x2d87011687c408.mount: Deactivated successfully. Jul 14 22:47:47.375089 env[1204]: time="2025-07-14T22:47:47.375037819Z" level=info msg="TearDown network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" successfully" Jul 14 22:47:47.375140 env[1204]: time="2025-07-14T22:47:47.375083765Z" level=info msg="StopPodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" returns successfully" Jul 14 22:47:47.375418 kubelet[1950]: E0714 22:47:47.375389 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:47.379071 env[1204]: time="2025-07-14T22:47:47.379036395Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sxff4,Uid:77a73afb-9132-4fa9-83f4-003723533a93,Namespace:kube-system,Attempt:1,}" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.331 [INFO][3962] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.331 [INFO][3962] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" iface="eth0" netns="/var/run/netns/cni-0e00a53a-9f19-4c43-ad40-2909db761241" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.331 [INFO][3962] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" iface="eth0" netns="/var/run/netns/cni-0e00a53a-9f19-4c43-ad40-2909db761241" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.332 [INFO][3962] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" iface="eth0" netns="/var/run/netns/cni-0e00a53a-9f19-4c43-ad40-2909db761241" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.332 [INFO][3962] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.332 [INFO][3962] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.360 [INFO][3994] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.360 [INFO][3994] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.367 [INFO][3994] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.373 [WARNING][3994] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.373 [INFO][3994] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.375 [INFO][3994] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:47.380786 env[1204]: 2025-07-14 22:47:47.377 [INFO][3962] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:47.384148 systemd[1]: run-netns-cni\x2d0e00a53a\x2d9f19\x2d4c43\x2dad40\x2d2909db761241.mount: Deactivated successfully. Jul 14 22:47:47.385653 env[1204]: time="2025-07-14T22:47:47.385601047Z" level=info msg="TearDown network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" successfully" Jul 14 22:47:47.385653 env[1204]: time="2025-07-14T22:47:47.385646262Z" level=info msg="StopPodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" returns successfully" Jul 14 22:47:47.386277 env[1204]: time="2025-07-14T22:47:47.386229406Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdgzk,Uid:8727a635-0d5f-4f08-b7a4-2a66134d8eff,Namespace:calico-system,Attempt:1,}" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.340 [INFO][3963] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.340 [INFO][3963] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" iface="eth0" netns="/var/run/netns/cni-f15bac56-993b-bb6d-4a8f-895b5a197dd7" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.340 [INFO][3963] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" iface="eth0" netns="/var/run/netns/cni-f15bac56-993b-bb6d-4a8f-895b5a197dd7" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.340 [INFO][3963] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" iface="eth0" netns="/var/run/netns/cni-f15bac56-993b-bb6d-4a8f-895b5a197dd7" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.340 [INFO][3963] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.340 [INFO][3963] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.372 [INFO][4006] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.372 [INFO][4006] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.375 [INFO][4006] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.380 [WARNING][4006] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.381 [INFO][4006] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.382 [INFO][4006] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:47.386277 env[1204]: 2025-07-14 22:47:47.383 [INFO][3963] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:47.388654 env[1204]: time="2025-07-14T22:47:47.388622569Z" level=info msg="TearDown network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" successfully" Jul 14 22:47:47.388710 env[1204]: time="2025-07-14T22:47:47.388653196Z" level=info msg="StopPodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" returns successfully" Jul 14 22:47:47.388671 systemd[1]: run-netns-cni\x2df15bac56\x2d993b\x2dbb6d\x2d4a8f\x2d895b5a197dd7.mount: Deactivated successfully. Jul 14 22:47:47.389039 env[1204]: time="2025-07-14T22:47:47.389017901Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-jv8ws,Uid:e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84,Namespace:calico-apiserver,Attempt:1,}" Jul 14 22:47:47.442669 systemd-networkd[1029]: cali1c5c775a5ba: Gained IPv6LL Jul 14 22:47:47.761745 systemd-networkd[1029]: calida200756d33: Gained IPv6LL Jul 14 22:47:47.779059 systemd-networkd[1029]: cali7f0d1d24b60: Link UP Jul 14 22:47:47.783036 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 22:47:47.783157 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7f0d1d24b60: link becomes ready Jul 14 22:47:47.782895 systemd-networkd[1029]: cali7f0d1d24b60: Gained carrier Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.448 [INFO][4041] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0 calico-apiserver-66666fb6d- calico-apiserver e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84 1027 0 2025-07-14 22:47:18 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:66666fb6d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-66666fb6d-jv8ws eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali7f0d1d24b60 [] [] }} ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.449 [INFO][4041] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.473 [INFO][4067] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" HandleID="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.473 [INFO][4067] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" HandleID="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002b7490), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-66666fb6d-jv8ws", "timestamp":"2025-07-14 22:47:47.473404679 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.473 [INFO][4067] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.473 [INFO][4067] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.473 [INFO][4067] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.479 [INFO][4067] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.490 [INFO][4067] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.497 [INFO][4067] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.499 [INFO][4067] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.500 [INFO][4067] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.500 [INFO][4067] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.502 [INFO][4067] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.557 [INFO][4067] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.774 [INFO][4067] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.774 [INFO][4067] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" host="localhost" Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.774 [INFO][4067] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:47.798002 env[1204]: 2025-07-14 22:47:47.775 [INFO][4067] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" HandleID="k8s-pod-network.0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.799172 env[1204]: 2025-07-14 22:47:47.777 [INFO][4041] cni-plugin/k8s.go 418: Populated endpoint ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-66666fb6d-jv8ws", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f0d1d24b60", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:47.799172 env[1204]: 2025-07-14 22:47:47.777 [INFO][4041] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.799172 env[1204]: 2025-07-14 22:47:47.777 [INFO][4041] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7f0d1d24b60 ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.799172 env[1204]: 2025-07-14 22:47:47.787 [INFO][4041] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.799172 env[1204]: 2025-07-14 22:47:47.787 [INFO][4041] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84", ResourceVersion:"1027", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc", Pod:"calico-apiserver-66666fb6d-jv8ws", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f0d1d24b60", MAC:"46:b8:d9:91:16:f0", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:47.799172 env[1204]: 2025-07-14 22:47:47.795 [INFO][4041] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc" Namespace="calico-apiserver" Pod="calico-apiserver-66666fb6d-jv8ws" WorkloadEndpoint="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:47.807000 audit[4103]: NETFILTER_CFG table=filter:109 family=2 entries=49 op=nft_register_chain pid=4103 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:47.807000 audit[4103]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffc72591710 a2=0 a3=7ffc725916fc items=0 ppid=3333 pid=4103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.807000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:47.810509 env[1204]: time="2025-07-14T22:47:47.810395909Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:47.810509 env[1204]: time="2025-07-14T22:47:47.810440863Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:47.810509 env[1204]: time="2025-07-14T22:47:47.810454609Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:47.810853 env[1204]: time="2025-07-14T22:47:47.810656668Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc pid=4110 runtime=io.containerd.runc.v2 Jul 14 22:47:47.814412 systemd-networkd[1029]: cali7ee3f805cc1: Link UP Jul 14 22:47:47.816331 systemd-networkd[1029]: cali7ee3f805cc1: Gained carrier Jul 14 22:47:47.816552 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7ee3f805cc1: link becomes ready Jul 14 22:47:47.831357 systemd[1]: Started cri-containerd-0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc.scope. Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.446 [INFO][4019] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--sxff4-eth0 coredns-668d6bf9bc- kube-system 77a73afb-9132-4fa9-83f4-003723533a93 1026 0 2025-07-14 22:47:04 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-sxff4 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali7ee3f805cc1 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.446 [INFO][4019] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.494 [INFO][4065] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" HandleID="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.494 [INFO][4065] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" HandleID="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000515d90), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-sxff4", "timestamp":"2025-07-14 22:47:47.494680425 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.494 [INFO][4065] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.775 [INFO][4065] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.775 [INFO][4065] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.784 [INFO][4065] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.788 [INFO][4065] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.791 [INFO][4065] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.794 [INFO][4065] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.797 [INFO][4065] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.797 [INFO][4065] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.799 [INFO][4065] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.803 [INFO][4065] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.808 [INFO][4065] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.808 [INFO][4065] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" host="localhost" Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.808 [INFO][4065] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:47.833206 env[1204]: 2025-07-14 22:47:47.808 [INFO][4065] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" HandleID="k8s-pod-network.1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.833797 env[1204]: 2025-07-14 22:47:47.811 [INFO][4019] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sxff4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"77a73afb-9132-4fa9-83f4-003723533a93", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-sxff4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ee3f805cc1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:47.833797 env[1204]: 2025-07-14 22:47:47.811 [INFO][4019] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.833797 env[1204]: 2025-07-14 22:47:47.811 [INFO][4019] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7ee3f805cc1 ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.833797 env[1204]: 2025-07-14 22:47:47.816 [INFO][4019] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.833797 env[1204]: 2025-07-14 22:47:47.817 [INFO][4019] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sxff4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"77a73afb-9132-4fa9-83f4-003723533a93", ResourceVersion:"1026", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff", Pod:"coredns-668d6bf9bc-sxff4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ee3f805cc1", MAC:"e6:d3:08:6f:7f:dc", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:47.833797 env[1204]: 2025-07-14 22:47:47.827 [INFO][4019] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff" Namespace="kube-system" Pod="coredns-668d6bf9bc-sxff4" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit: BPF prog-id=178 op=LOAD Jul 14 22:47:47.842000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.842000 audit[4122]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4110 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.842000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343466626638383635373432306662373963316532383461656663 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4110 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343466626638383635373432306662373963316532383461656663 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit: BPF prog-id=179 op=LOAD Jul 14 22:47:47.843000 audit[4122]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c4d70 items=0 ppid=4110 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343466626638383635373432306662373963316532383461656663 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit: BPF prog-id=180 op=LOAD Jul 14 22:47:47.843000 audit[4122]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c4db8 items=0 ppid=4110 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343466626638383635373432306662373963316532383461656663 Jul 14 22:47:47.843000 audit: BPF prog-id=180 op=UNLOAD Jul 14 22:47:47.843000 audit: BPF prog-id=179 op=UNLOAD Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { perfmon } for pid=4122 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit[4122]: AVC avc: denied { bpf } for pid=4122 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.843000 audit: BPF prog-id=181 op=LOAD Jul 14 22:47:47.843000 audit[4122]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c51c8 items=0 ppid=4110 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.843000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3036343466626638383635373432306662373963316532383461656663 Jul 14 22:47:47.844426 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:47.846000 audit[4151]: NETFILTER_CFG table=filter:110 family=2 entries=64 op=nft_register_chain pid=4151 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:47.847969 env[1204]: time="2025-07-14T22:47:47.847093331Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:47.847969 env[1204]: time="2025-07-14T22:47:47.847134328Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:47.847969 env[1204]: time="2025-07-14T22:47:47.847146291Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:47.847969 env[1204]: time="2025-07-14T22:47:47.847294159Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff pid=4155 runtime=io.containerd.runc.v2 Jul 14 22:47:47.846000 audit[4151]: SYSCALL arch=c000003e syscall=46 success=yes exit=30156 a0=3 a1=7ffd7053b290 a2=0 a3=7ffd7053b27c items=0 ppid=3333 pid=4151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.846000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:47.857149 systemd[1]: Started cri-containerd-1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff.scope. Jul 14 22:47:47.868150 env[1204]: time="2025-07-14T22:47:47.868114490Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-66666fb6d-jv8ws,Uid:e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc\"" Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit: BPF prog-id=182 op=LOAD Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4155 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161376338636462386262316438346130386166393631633133393764 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4155 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161376338636462386262316438346130386166393631633133393764 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.870000 audit: BPF prog-id=183 op=LOAD Jul 14 22:47:47.870000 audit[4165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000dfce0 items=0 ppid=4155 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.870000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161376338636462386262316438346130386166393631633133393764 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit: BPF prog-id=184 op=LOAD Jul 14 22:47:47.871000 audit[4165]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000dfd28 items=0 ppid=4155 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161376338636462386262316438346130386166393631633133393764 Jul 14 22:47:47.871000 audit: BPF prog-id=184 op=UNLOAD Jul 14 22:47:47.871000 audit: BPF prog-id=183 op=UNLOAD Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { perfmon } for pid=4165 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit[4165]: AVC avc: denied { bpf } for pid=4165 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.871000 audit: BPF prog-id=185 op=LOAD Jul 14 22:47:47.871000 audit[4165]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000360138 items=0 ppid=4155 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161376338636462386262316438346130386166393631633133393764 Jul 14 22:47:47.872347 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:47.896802 env[1204]: time="2025-07-14T22:47:47.896746283Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-sxff4,Uid:77a73afb-9132-4fa9-83f4-003723533a93,Namespace:kube-system,Attempt:1,} returns sandbox id \"1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff\"" Jul 14 22:47:47.897502 kubelet[1950]: E0714 22:47:47.897469 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:47.899462 env[1204]: time="2025-07-14T22:47:47.899412377Z" level=info msg="CreateContainer within sandbox \"1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 22:47:47.923352 systemd-networkd[1029]: cali1fa8417b462: Link UP Jul 14 22:47:47.925835 systemd-networkd[1029]: cali1fa8417b462: Gained carrier Jul 14 22:47:47.926669 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1fa8417b462: link becomes ready Jul 14 22:47:47.935583 env[1204]: time="2025-07-14T22:47:47.935502421Z" level=info msg="CreateContainer within sandbox \"1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"258759c6bfd3b74d3afa98e8de7060784360cb75407da6a2c26655fde5d1404e\"" Jul 14 22:47:47.936239 env[1204]: time="2025-07-14T22:47:47.936196773Z" level=info msg="StartContainer for \"258759c6bfd3b74d3afa98e8de7060784360cb75407da6a2c26655fde5d1404e\"" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.460 [INFO][4030] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--bdgzk-eth0 csi-node-driver- calico-system 8727a635-0d5f-4f08-b7a4-2a66134d8eff 1025 0 2025-07-14 22:47:21 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-bdgzk eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali1fa8417b462 [] [] }} ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.460 [INFO][4030] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.496 [INFO][4078] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" HandleID="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.497 [INFO][4078] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" HandleID="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0001384f0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-bdgzk", "timestamp":"2025-07-14 22:47:47.496973298 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.497 [INFO][4078] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.809 [INFO][4078] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.809 [INFO][4078] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.885 [INFO][4078] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.889 [INFO][4078] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.895 [INFO][4078] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.897 [INFO][4078] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.900 [INFO][4078] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.900 [INFO][4078] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.902 [INFO][4078] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21 Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.905 [INFO][4078] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.919 [INFO][4078] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.919 [INFO][4078] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" host="localhost" Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.919 [INFO][4078] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:47.940718 env[1204]: 2025-07-14 22:47:47.919 [INFO][4078] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" HandleID="k8s-pod-network.f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.941392 env[1204]: 2025-07-14 22:47:47.921 [INFO][4030] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdgzk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8727a635-0d5f-4f08-b7a4-2a66134d8eff", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-bdgzk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fa8417b462", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:47.941392 env[1204]: 2025-07-14 22:47:47.921 [INFO][4030] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.941392 env[1204]: 2025-07-14 22:47:47.921 [INFO][4030] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1fa8417b462 ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.941392 env[1204]: 2025-07-14 22:47:47.926 [INFO][4030] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.941392 env[1204]: 2025-07-14 22:47:47.927 [INFO][4030] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdgzk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8727a635-0d5f-4f08-b7a4-2a66134d8eff", ResourceVersion:"1025", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21", Pod:"csi-node-driver-bdgzk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fa8417b462", MAC:"96:8a:bf:7d:01:d5", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:47.941392 env[1204]: 2025-07-14 22:47:47.937 [INFO][4030] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21" Namespace="calico-system" Pod="csi-node-driver-bdgzk" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:47.952574 systemd[1]: Started cri-containerd-258759c6bfd3b74d3afa98e8de7060784360cb75407da6a2c26655fde5d1404e.scope. Jul 14 22:47:47.951000 audit[4224]: NETFILTER_CFG table=filter:111 family=2 entries=58 op=nft_register_chain pid=4224 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:47.951000 audit[4224]: SYSCALL arch=c000003e syscall=46 success=yes exit=27164 a0=3 a1=7ffc42f4ca70 a2=0 a3=7ffc42f4ca5c items=0 ppid=3333 pid=4224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.951000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:47.971180 env[1204]: time="2025-07-14T22:47:47.958680296Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:47.971180 env[1204]: time="2025-07-14T22:47:47.958781927Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:47.971180 env[1204]: time="2025-07-14T22:47:47.958803788Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:47.971180 env[1204]: time="2025-07-14T22:47:47.958961794Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21 pid=4233 runtime=io.containerd.runc.v2 Jul 14 22:47:47.977252 systemd[1]: Started cri-containerd-f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21.scope. Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit: BPF prog-id=186 op=LOAD Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4155 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383735396336626664336237346433616661393865386465373036 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=4155 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383735396336626664336237346433616661393865386465373036 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.980000 audit: BPF prog-id=187 op=LOAD Jul 14 22:47:47.980000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00031ce90 items=0 ppid=4155 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.980000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383735396336626664336237346433616661393865386465373036 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit: BPF prog-id=188 op=LOAD Jul 14 22:47:47.981000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00031ced8 items=0 ppid=4155 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383735396336626664336237346433616661393865386465373036 Jul 14 22:47:47.981000 audit: BPF prog-id=188 op=UNLOAD Jul 14 22:47:47.981000 audit: BPF prog-id=187 op=UNLOAD Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { perfmon } for pid=4210 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit[4210]: AVC avc: denied { bpf } for pid=4210 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.981000 audit: BPF prog-id=189 op=LOAD Jul 14 22:47:47.981000 audit[4210]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00031d2e8 items=0 ppid=4155 pid=4210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.981000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3235383735396336626664336237346433616661393865386465373036 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.990000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit: BPF prog-id=190 op=LOAD Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633323065303366613439646263356163656162646132323035383138 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633323065303366613439646263356163656162646132323035383138 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit: BPF prog-id=191 op=LOAD Jul 14 22:47:47.991000 audit[4248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003c0490 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633323065303366613439646263356163656162646132323035383138 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit: BPF prog-id=192 op=LOAD Jul 14 22:47:47.991000 audit[4248]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003c04d8 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633323065303366613439646263356163656162646132323035383138 Jul 14 22:47:47.991000 audit: BPF prog-id=192 op=UNLOAD Jul 14 22:47:47.991000 audit: BPF prog-id=191 op=UNLOAD Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { perfmon } for pid=4248 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit[4248]: AVC avc: denied { bpf } for pid=4248 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:47.991000 audit: BPF prog-id=193 op=LOAD Jul 14 22:47:47.991000 audit[4248]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c08e8 items=0 ppid=4233 pid=4248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:47.991000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6633323065303366613439646263356163656162646132323035383138 Jul 14 22:47:47.992787 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:48.002377 env[1204]: time="2025-07-14T22:47:48.002333164Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdgzk,Uid:8727a635-0d5f-4f08-b7a4-2a66134d8eff,Namespace:calico-system,Attempt:1,} returns sandbox id \"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21\"" Jul 14 22:47:48.030645 env[1204]: time="2025-07-14T22:47:48.028628999Z" level=info msg="StopPodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\"" Jul 14 22:47:48.034000 audit[4238]: AVC avc: denied { getattr } for pid=4238 comm="coredns" path="cgroup:[4026532533]" dev="nsfs" ino=4026532533 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c1016 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:47:48.036345 kernel: kauditd_printk_skb: 1138 callbacks suppressed Jul 14 22:47:48.036387 kernel: audit: type=1400 audit(1752533268.034:1305): avc: denied { getattr } for pid=4238 comm="coredns" path="cgroup:[4026532533]" dev="nsfs" ino=4026532533 scontext=system_u:system_r:svirt_lxc_net_t:s0:c503,c1016 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:47:48.034000 audit[4238]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c00011ced8 a3=0 items=0 ppid=4155 pid=4238 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c1016 key=(null) Jul 14 22:47:48.046625 kernel: audit: type=1300 audit(1752533268.034:1305): arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c00011ced8 a3=0 items=0 ppid=4155 pid=4238 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c503,c1016 key=(null) Jul 14 22:47:48.048549 kernel: audit: type=1327 audit(1752533268.034:1305): proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:47:48.034000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:47:48.120319 env[1204]: time="2025-07-14T22:47:48.120256515Z" level=info msg="StartContainer for \"258759c6bfd3b74d3afa98e8de7060784360cb75407da6a2c26655fde5d1404e\" returns successfully" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.237 [INFO][4296] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.238 [INFO][4296] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" iface="eth0" netns="/var/run/netns/cni-6e471fec-b858-8296-4a34-ddb23c572bca" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.238 [INFO][4296] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" iface="eth0" netns="/var/run/netns/cni-6e471fec-b858-8296-4a34-ddb23c572bca" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.238 [INFO][4296] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" iface="eth0" netns="/var/run/netns/cni-6e471fec-b858-8296-4a34-ddb23c572bca" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.238 [INFO][4296] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.238 [INFO][4296] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.257 [INFO][4309] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.257 [INFO][4309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.257 [INFO][4309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.262 [WARNING][4309] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.262 [INFO][4309] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.264 [INFO][4309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:48.268574 env[1204]: 2025-07-14 22:47:48.266 [INFO][4296] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:48.269000 env[1204]: time="2025-07-14T22:47:48.268718543Z" level=info msg="TearDown network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" successfully" Jul 14 22:47:48.269000 env[1204]: time="2025-07-14T22:47:48.268757346Z" level=info msg="StopPodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" returns successfully" Jul 14 22:47:48.269050 kubelet[1950]: E0714 22:47:48.268996 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:48.269910 env[1204]: time="2025-07-14T22:47:48.269609155Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-cbzv8,Uid:5ee219b8-da54-48a0-b525-adcb85b9c9a7,Namespace:kube-system,Attempt:1,}" Jul 14 22:47:48.271370 systemd[1]: run-netns-cni\x2d6e471fec\x2db858\x2d8296\x2d4a34\x2dddb23c572bca.mount: Deactivated successfully. Jul 14 22:47:48.346119 kubelet[1950]: E0714 22:47:48.345401 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:48.429311 systemd[1]: Started sshd@9-10.0.0.3:22-10.0.0.1:44466.service. Jul 14 22:47:48.428000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.3:22-10.0.0.1:44466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:48.434550 kernel: audit: type=1130 audit(1752533268.428:1306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.3:22-10.0.0.1:44466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:48.460000 audit[4341]: USER_ACCT pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.461501 sshd[4341]: Accepted publickey for core from 10.0.0.1 port 44466 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:48.463003 sshd[4341]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:48.462000 audit[4341]: CRED_ACQ pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.468071 systemd-logind[1194]: New session 10 of user core. Jul 14 22:47:48.468778 systemd[1]: Started session-10.scope. Jul 14 22:47:48.469435 kernel: audit: type=1101 audit(1752533268.460:1307): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.469480 kernel: audit: type=1103 audit(1752533268.462:1308): pid=4341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.469502 kernel: audit: type=1006 audit(1752533268.462:1309): pid=4341 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 22:47:48.476084 kernel: audit: type=1300 audit(1752533268.462:1309): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff98e9d450 a2=3 a3=0 items=0 ppid=1 pid=4341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.462000 audit[4341]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff98e9d450 a2=3 a3=0 items=0 ppid=1 pid=4341 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.462000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:48.477554 kernel: audit: type=1327 audit(1752533268.462:1309): proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:48.477581 kernel: audit: type=1105 audit(1752533268.471:1310): pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.471000 audit[4341]: USER_START pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.472000 audit[4343]: CRED_ACQ pid=4343 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.708052 kubelet[1950]: I0714 22:47:48.707840 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-sxff4" podStartSLOduration=44.707820654 podStartE2EDuration="44.707820654s" podCreationTimestamp="2025-07-14 22:47:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:47:48.70716366 +0000 UTC m=+51.749504485" watchObservedRunningTime="2025-07-14 22:47:48.707820654 +0000 UTC m=+51.750161458" Jul 14 22:47:48.715853 sshd[4341]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:48.716000 audit[4341]: USER_END pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.716000 audit[4341]: CRED_DISP pid=4341 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.718431 systemd[1]: sshd@9-10.0.0.3:22-10.0.0.1:44466.service: Deactivated successfully. Jul 14 22:47:48.718000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-10.0.0.3:22-10.0.0.1:44466 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:48.719069 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 22:47:48.719652 systemd-logind[1194]: Session 10 logged out. Waiting for processes to exit. Jul 14 22:47:48.720898 systemd[1]: Started sshd@10-10.0.0.3:22-10.0.0.1:44472.service. Jul 14 22:47:48.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.3:22-10.0.0.1:44472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:48.722329 systemd-logind[1194]: Removed session 10. Jul 14 22:47:48.746000 audit[4358]: NETFILTER_CFG table=filter:112 family=2 entries=20 op=nft_register_rule pid=4358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:48.746000 audit[4358]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffcd4e55080 a2=0 a3=7ffcd4e5506c items=0 ppid=2059 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.746000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:48.752000 audit[4358]: NETFILTER_CFG table=nat:113 family=2 entries=14 op=nft_register_rule pid=4358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:48.752000 audit[4358]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffcd4e55080 a2=0 a3=0 items=0 ppid=2059 pid=4358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.752000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:48.754000 audit[4355]: USER_ACCT pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.755472 sshd[4355]: Accepted publickey for core from 10.0.0.1 port 44472 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:48.755000 audit[4355]: CRED_ACQ pid=4355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.755000 audit[4355]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff1e4184f0 a2=3 a3=0 items=0 ppid=1 pid=4355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.755000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:48.756571 sshd[4355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:48.761143 systemd[1]: Started session-11.scope. Jul 14 22:47:48.761623 systemd-logind[1194]: New session 11 of user core. Jul 14 22:47:48.766000 audit[4355]: USER_START pid=4355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.768000 audit[4360]: CRED_ACQ pid=4360 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:48.769000 audit[4361]: NETFILTER_CFG table=filter:114 family=2 entries=17 op=nft_register_rule pid=4361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:48.769000 audit[4361]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd97132a90 a2=0 a3=7ffd97132a7c items=0 ppid=2059 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.769000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:48.774278 systemd-networkd[1029]: calif3fff7a3409: Link UP Jul 14 22:47:48.775903 systemd-networkd[1029]: calif3fff7a3409: Gained carrier Jul 14 22:47:48.776553 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calif3fff7a3409: link becomes ready Jul 14 22:47:48.779000 audit[4361]: NETFILTER_CFG table=nat:115 family=2 entries=35 op=nft_register_chain pid=4361 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:48.779000 audit[4361]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffd97132a90 a2=0 a3=7ffd97132a7c items=0 ppid=2059 pid=4361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.779000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.307 [INFO][4317] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0 coredns-668d6bf9bc- kube-system 5ee219b8-da54-48a0-b525-adcb85b9c9a7 1050 0 2025-07-14 22:47:04 +0000 UTC map[k8s-app:kube-dns pod-template-hash:668d6bf9bc projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-668d6bf9bc-cbzv8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] calif3fff7a3409 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.307 [INFO][4317] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.327 [INFO][4332] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" HandleID="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.327 [INFO][4332] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" HandleID="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004e790), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-668d6bf9bc-cbzv8", "timestamp":"2025-07-14 22:47:48.32737237 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.327 [INFO][4332] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.327 [INFO][4332] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.327 [INFO][4332] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.557 [INFO][4332] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.740 [INFO][4332] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.748 [INFO][4332] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.750 [INFO][4332] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.754 [INFO][4332] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.754 [INFO][4332] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.756 [INFO][4332] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.762 [INFO][4332] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.769 [INFO][4332] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.769 [INFO][4332] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" host="localhost" Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.770 [INFO][4332] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:48.789654 env[1204]: 2025-07-14 22:47:48.770 [INFO][4332] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" HandleID="k8s-pod-network.bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.790243 env[1204]: 2025-07-14 22:47:48.772 [INFO][4317] cni-plugin/k8s.go 418: Populated endpoint ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5ee219b8-da54-48a0-b525-adcb85b9c9a7", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-668d6bf9bc-cbzv8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif3fff7a3409", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:48.790243 env[1204]: 2025-07-14 22:47:48.772 [INFO][4317] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.790243 env[1204]: 2025-07-14 22:47:48.773 [INFO][4317] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calif3fff7a3409 ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.790243 env[1204]: 2025-07-14 22:47:48.775 [INFO][4317] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.790243 env[1204]: 2025-07-14 22:47:48.777 [INFO][4317] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5ee219b8-da54-48a0-b525-adcb85b9c9a7", ResourceVersion:"1050", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f", Pod:"coredns-668d6bf9bc-cbzv8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif3fff7a3409", MAC:"7a:3d:4b:5b:6b:e2", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:48.790243 env[1204]: 2025-07-14 22:47:48.785 [INFO][4317] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f" Namespace="kube-system" Pod="coredns-668d6bf9bc-cbzv8" WorkloadEndpoint="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:48.799000 audit[4375]: NETFILTER_CFG table=filter:116 family=2 entries=54 op=nft_register_chain pid=4375 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 22:47:48.799000 audit[4375]: SYSCALL arch=c000003e syscall=46 success=yes exit=25540 a0=3 a1=7ffec7971bc0 a2=0 a3=7ffec7971bac items=0 ppid=3333 pid=4375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.799000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 22:47:48.801561 env[1204]: time="2025-07-14T22:47:48.801337886Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 22:47:48.801561 env[1204]: time="2025-07-14T22:47:48.801472409Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 22:47:48.801648 env[1204]: time="2025-07-14T22:47:48.801563370Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 22:47:48.801818 env[1204]: time="2025-07-14T22:47:48.801757694Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f pid=4379 runtime=io.containerd.runc.v2 Jul 14 22:47:48.811953 systemd[1]: Started cri-containerd-bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f.scope. Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.822000 audit: BPF prog-id=194 op=LOAD Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000199c48 a2=10 a3=1c items=0 ppid=4379 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262393364643934653466616464633630393433363765333635643766 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=c items=0 ppid=4379 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262393364643934653466616464633630393433363765333635643766 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit: BPF prog-id=195 op=LOAD Jul 14 22:47:48.823000 audit[4389]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001999d8 a2=78 a3=c000098450 items=0 ppid=4379 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262393364643934653466616464633630393433363765333635643766 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit: BPF prog-id=196 op=LOAD Jul 14 22:47:48.823000 audit[4389]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000199770 a2=78 a3=c000098498 items=0 ppid=4379 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262393364643934653466616464633630393433363765333635643766 Jul 14 22:47:48.823000 audit: BPF prog-id=196 op=UNLOAD Jul 14 22:47:48.823000 audit: BPF prog-id=195 op=UNLOAD Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { perfmon } for pid=4389 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit[4389]: AVC avc: denied { bpf } for pid=4389 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:48.823000 audit: BPF prog-id=197 op=LOAD Jul 14 22:47:48.823000 audit[4389]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000199c30 a2=78 a3=c0000988a8 items=0 ppid=4379 pid=4389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:48.823000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6262393364643934653466616464633630393433363765333635643766 Jul 14 22:47:48.824521 systemd-resolved[1145]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 22:47:48.851008 env[1204]: time="2025-07-14T22:47:48.850970262Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-668d6bf9bc-cbzv8,Uid:5ee219b8-da54-48a0-b525-adcb85b9c9a7,Namespace:kube-system,Attempt:1,} returns sandbox id \"bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f\"" Jul 14 22:47:48.852135 kubelet[1950]: E0714 22:47:48.852115 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:48.863754 env[1204]: time="2025-07-14T22:47:48.863718939Z" level=info msg="CreateContainer within sandbox \"bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 22:47:48.980223 systemd-networkd[1029]: cali7ee3f805cc1: Gained IPv6LL Jul 14 22:47:49.008658 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3470837780.mount: Deactivated successfully. Jul 14 22:47:49.013070 env[1204]: time="2025-07-14T22:47:49.011088736Z" level=info msg="CreateContainer within sandbox \"bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c34d2b888b796922757dabf42c7e07caeeb307a23a3296ef226d203d004b7edb\"" Jul 14 22:47:49.013070 env[1204]: time="2025-07-14T22:47:49.012140530Z" level=info msg="StartContainer for \"c34d2b888b796922757dabf42c7e07caeeb307a23a3296ef226d203d004b7edb\"" Jul 14 22:47:49.043000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.3:22-10.0.0.1:44486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:49.043754 systemd[1]: Started sshd@11-10.0.0.3:22-10.0.0.1:44486.service. Jul 14 22:47:49.047543 sshd[4355]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:49.048000 audit[4355]: USER_END pid=4355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.049000 audit[4355]: CRED_DISP pid=4355 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.052966 systemd-logind[1194]: Session 11 logged out. Waiting for processes to exit. Jul 14 22:47:49.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-10.0.0.3:22-10.0.0.1:44472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:49.053835 systemd[1]: sshd@10-10.0.0.3:22-10.0.0.1:44472.service: Deactivated successfully. Jul 14 22:47:49.054471 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 22:47:49.055993 systemd-logind[1194]: Removed session 11. Jul 14 22:47:49.057822 systemd[1]: Started cri-containerd-c34d2b888b796922757dabf42c7e07caeeb307a23a3296ef226d203d004b7edb.scope. Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.074000 audit: BPF prog-id=198 op=LOAD Jul 14 22:47:49.075000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.075000 audit[4426]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4379 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346432623838386237393639323237353764616266343263376530 Jul 14 22:47:49.075000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.075000 audit[4426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4379 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346432623838386237393639323237353764616266343263376530 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.076000 audit: BPF prog-id=199 op=LOAD Jul 14 22:47:49.076000 audit[4426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001a0630 items=0 ppid=4379 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.076000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346432623838386237393639323237353764616266343263376530 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.077000 audit: BPF prog-id=200 op=LOAD Jul 14 22:47:49.077000 audit[4426]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001a0678 items=0 ppid=4379 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.077000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346432623838386237393639323237353764616266343263376530 Jul 14 22:47:49.077000 audit: BPF prog-id=200 op=UNLOAD Jul 14 22:47:49.077000 audit: BPF prog-id=199 op=UNLOAD Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { perfmon } for pid=4426 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit[4426]: AVC avc: denied { bpf } for pid=4426 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:49.078000 audit: BPF prog-id=201 op=LOAD Jul 14 22:47:49.078000 audit[4426]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0001a0a88 items=0 ppid=4379 pid=4426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333346432623838386237393639323237353764616266343263376530 Jul 14 22:47:49.081000 audit[4435]: USER_ACCT pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.082047 sshd[4435]: Accepted publickey for core from 10.0.0.1 port 44486 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:49.082000 audit[4435]: CRED_ACQ pid=4435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.082000 audit[4435]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeb03eba80 a2=3 a3=0 items=0 ppid=1 pid=4435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.082000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:49.083175 sshd[4435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:49.087186 systemd[1]: Started session-12.scope. Jul 14 22:47:49.088607 systemd-logind[1194]: New session 12 of user core. Jul 14 22:47:49.092000 audit[4435]: USER_START pid=4435 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.093000 audit[4448]: CRED_ACQ pid=4448 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.101826 env[1204]: time="2025-07-14T22:47:49.101779241Z" level=info msg="StartContainer for \"c34d2b888b796922757dabf42c7e07caeeb307a23a3296ef226d203d004b7edb\" returns successfully" Jul 14 22:47:49.109000 audit[4439]: AVC avc: denied { getattr } for pid=4439 comm="coredns" path="cgroup:[4026532309]" dev="nsfs" ino=4026532309 scontext=system_u:system_r:svirt_lxc_net_t:s0:c48,c981 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 22:47:49.109000 audit[4439]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00057e7f8 a2=c0005a2b98 a3=0 items=0 ppid=4379 pid=4439 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c48,c981 key=(null) Jul 14 22:47:49.109000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 22:47:49.203252 sshd[4435]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:49.203000 audit[4435]: USER_END pid=4435 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.204000 audit[4435]: CRED_DISP pid=4435 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:49.206006 systemd[1]: sshd@11-10.0.0.3:22-10.0.0.1:44486.service: Deactivated successfully. Jul 14 22:47:49.205000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-10.0.0.3:22-10.0.0.1:44486 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:49.206700 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 22:47:49.207245 systemd-logind[1194]: Session 12 logged out. Waiting for processes to exit. Jul 14 22:47:49.207944 systemd-logind[1194]: Removed session 12. Jul 14 22:47:49.351717 kubelet[1950]: E0714 22:47:49.351601 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:49.351717 kubelet[1950]: E0714 22:47:49.351626 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:49.371858 kubelet[1950]: I0714 22:47:49.371242 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-668d6bf9bc-cbzv8" podStartSLOduration=45.371221108 podStartE2EDuration="45.371221108s" podCreationTimestamp="2025-07-14 22:47:04 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 22:47:49.362693755 +0000 UTC m=+52.405034549" watchObservedRunningTime="2025-07-14 22:47:49.371221108 +0000 UTC m=+52.413561912" Jul 14 22:47:49.681673 systemd-networkd[1029]: cali7f0d1d24b60: Gained IPv6LL Jul 14 22:47:49.794000 audit[4475]: NETFILTER_CFG table=filter:117 family=2 entries=14 op=nft_register_rule pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:49.794000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd4cc269b0 a2=0 a3=7ffd4cc2699c items=0 ppid=2059 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.794000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:49.804000 audit[4475]: NETFILTER_CFG table=nat:118 family=2 entries=56 op=nft_register_chain pid=4475 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:49.804000 audit[4475]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffd4cc269b0 a2=0 a3=7ffd4cc2699c items=0 ppid=2059 pid=4475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:49.804000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:49.809676 systemd-networkd[1029]: cali1fa8417b462: Gained IPv6LL Jul 14 22:47:50.352945 kubelet[1950]: E0714 22:47:50.352904 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:50.353397 kubelet[1950]: E0714 22:47:50.353378 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:50.577673 systemd-networkd[1029]: calif3fff7a3409: Gained IPv6LL Jul 14 22:47:51.012677 env[1204]: time="2025-07-14T22:47:51.012578305Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:51.014506 env[1204]: time="2025-07-14T22:47:51.014476085Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:51.016222 env[1204]: time="2025-07-14T22:47:51.016163261Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:51.017501 env[1204]: time="2025-07-14T22:47:51.017464463Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:51.017905 env[1204]: time="2025-07-14T22:47:51.017872760Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 14 22:47:51.019040 env[1204]: time="2025-07-14T22:47:51.018817792Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 22:47:51.027128 env[1204]: time="2025-07-14T22:47:51.025127062Z" level=info msg="CreateContainer within sandbox \"9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 22:47:51.354670 kubelet[1950]: E0714 22:47:51.354557 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:47:51.674173 env[1204]: time="2025-07-14T22:47:51.674123115Z" level=info msg="CreateContainer within sandbox \"9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"40ce216dce8e75455393c97fca87210ddb44a51b29f7a39f506b63af8466fc46\"" Jul 14 22:47:51.674784 env[1204]: time="2025-07-14T22:47:51.674717621Z" level=info msg="StartContainer for \"40ce216dce8e75455393c97fca87210ddb44a51b29f7a39f506b63af8466fc46\"" Jul 14 22:47:51.689647 systemd[1]: Started cri-containerd-40ce216dce8e75455393c97fca87210ddb44a51b29f7a39f506b63af8466fc46.scope. Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.699000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit: BPF prog-id=202 op=LOAD Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3656 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:51.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636532313664636538653735343535333933633937666361383732 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3656 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:51.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636532313664636538653735343535333933633937666361383732 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit: BPF prog-id=203 op=LOAD Jul 14 22:47:51.700000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00032fd40 items=0 ppid=3656 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:51.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636532313664636538653735343535333933633937666361383732 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit: BPF prog-id=204 op=LOAD Jul 14 22:47:51.700000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00032fd88 items=0 ppid=3656 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:51.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636532313664636538653735343535333933633937666361383732 Jul 14 22:47:51.700000 audit: BPF prog-id=204 op=UNLOAD Jul 14 22:47:51.700000 audit: BPF prog-id=203 op=UNLOAD Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { perfmon } for pid=4492 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit[4492]: AVC avc: denied { bpf } for pid=4492 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:51.700000 audit: BPF prog-id=205 op=LOAD Jul 14 22:47:51.700000 audit[4492]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00039c198 items=0 ppid=3656 pid=4492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:51.700000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3430636532313664636538653735343535333933633937666361383732 Jul 14 22:47:51.871991 env[1204]: time="2025-07-14T22:47:51.871941592Z" level=info msg="StartContainer for \"40ce216dce8e75455393c97fca87210ddb44a51b29f7a39f506b63af8466fc46\" returns successfully" Jul 14 22:47:52.368379 kubelet[1950]: I0714 22:47:52.368265 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-f498f6dc-7zpk5" podStartSLOduration=25.640801603 podStartE2EDuration="31.368244583s" podCreationTimestamp="2025-07-14 22:47:21 +0000 UTC" firstStartedPulling="2025-07-14 22:47:45.291096621 +0000 UTC m=+48.333437425" lastFinishedPulling="2025-07-14 22:47:51.018539601 +0000 UTC m=+54.060880405" observedRunningTime="2025-07-14 22:47:52.367850254 +0000 UTC m=+55.410191058" watchObservedRunningTime="2025-07-14 22:47:52.368244583 +0000 UTC m=+55.410585387" Jul 14 22:47:54.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.3:22-10.0.0.1:44488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:54.207226 systemd[1]: Started sshd@12-10.0.0.3:22-10.0.0.1:44488.service. Jul 14 22:47:54.208435 kernel: kauditd_printk_skb: 221 callbacks suppressed Jul 14 22:47:54.208470 kernel: audit: type=1130 audit(1752533274.206:1395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.3:22-10.0.0.1:44488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:54.239000 audit[4555]: USER_ACCT pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.243000 audit[4555]: CRED_ACQ pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.243891 sshd[4555]: Accepted publickey for core from 10.0.0.1 port 44488 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:54.244219 sshd[4555]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:54.244711 kernel: audit: type=1101 audit(1752533274.239:1396): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.244814 kernel: audit: type=1103 audit(1752533274.243:1397): pid=4555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.251015 kernel: audit: type=1006 audit(1752533274.243:1398): pid=4555 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 14 22:47:54.249199 systemd[1]: Started session-13.scope. Jul 14 22:47:54.256190 kernel: audit: type=1300 audit(1752533274.243:1398): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b9164e0 a2=3 a3=0 items=0 ppid=1 pid=4555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.243000 audit[4555]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff6b9164e0 a2=3 a3=0 items=0 ppid=1 pid=4555 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.249829 systemd-logind[1194]: New session 13 of user core. Jul 14 22:47:54.243000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:54.254000 audit[4555]: USER_START pid=4555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.262830 kernel: audit: type=1327 audit(1752533274.243:1398): proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:54.262882 kernel: audit: type=1105 audit(1752533274.254:1399): pid=4555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.262908 kernel: audit: type=1103 audit(1752533274.255:1400): pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.255000 audit[4557]: CRED_ACQ pid=4557 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.287000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.287000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.296407 kernel: audit: type=1400 audit(1752533274.287:1401): avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.296470 kernel: audit: type=1400 audit(1752533274.287:1402): avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.287000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020bd9b0 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:47:54.287000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001596260 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:47:54.287000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:47:54.287000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:47:54.421954 sshd[4555]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:54.422000 audit[4555]: USER_END pid=4555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.422000 audit[4555]: CRED_DISP pid=4555 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:54.424363 systemd[1]: sshd@12-10.0.0.3:22-10.0.0.1:44488.service: Deactivated successfully. Jul 14 22:47:54.425044 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 22:47:54.424000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-10.0.0.3:22-10.0.0.1:44488 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:54.425630 systemd-logind[1194]: Session 13 logged out. Waiting for processes to exit. Jul 14 22:47:54.426206 systemd-logind[1194]: Removed session 13. Jul 14 22:47:54.443000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.443000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a377470 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:47:54.443000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:47:54.448000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="vda9" ino=520974 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.448000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a3774d0 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:47:54.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:47:54.448000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.448000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c0096b9fa0 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:47:54.448000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:47:54.459000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="vda9" ino=520980 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.459000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00a3775f0 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:47:54.459000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:47:54.484000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="vda9" ino=520978 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.484000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00628fef0 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:47:54.484000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:47:54.484000 audit[1836]: AVC avc: denied { watch } for pid=1836 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:47:54.484000 audit[1836]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=73 a1=c009f1ba80 a2=fc6 a3=0 items=0 ppid=1667 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c528,c643 key=(null) Jul 14 22:47:54.484000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D31302E302E302E33002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B756265726E65 Jul 14 22:47:54.696509 env[1204]: time="2025-07-14T22:47:54.696450592Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:54.698379 env[1204]: time="2025-07-14T22:47:54.698335729Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:54.699961 env[1204]: time="2025-07-14T22:47:54.699928897Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:54.701386 env[1204]: time="2025-07-14T22:47:54.701361886Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:54.701816 env[1204]: time="2025-07-14T22:47:54.701784829Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 22:47:54.703723 env[1204]: time="2025-07-14T22:47:54.703696165Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 22:47:54.704347 env[1204]: time="2025-07-14T22:47:54.704316299Z" level=info msg="CreateContainer within sandbox \"a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:47:54.719791 env[1204]: time="2025-07-14T22:47:54.719709630Z" level=info msg="CreateContainer within sandbox \"a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"8d1b424f31a9b939843aa8c8d2d242f26ea7e57b7f503d47b56e86b9722cfc73\"" Jul 14 22:47:54.720335 env[1204]: time="2025-07-14T22:47:54.720299817Z" level=info msg="StartContainer for \"8d1b424f31a9b939843aa8c8d2d242f26ea7e57b7f503d47b56e86b9722cfc73\"" Jul 14 22:47:54.737012 systemd[1]: Started cri-containerd-8d1b424f31a9b939843aa8c8d2d242f26ea7e57b7f503d47b56e86b9722cfc73.scope. Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.746000 audit: BPF prog-id=206 op=LOAD Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3807 pid=4575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316234323466333161396239333938343361613863386432643234 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3807 pid=4575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316234323466333161396239333938343361613863386432643234 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit: BPF prog-id=207 op=LOAD Jul 14 22:47:54.747000 audit[4575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002133b0 items=0 ppid=3807 pid=4575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316234323466333161396239333938343361613863386432643234 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit: BPF prog-id=208 op=LOAD Jul 14 22:47:54.747000 audit[4575]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002133f8 items=0 ppid=3807 pid=4575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316234323466333161396239333938343361613863386432643234 Jul 14 22:47:54.747000 audit: BPF prog-id=208 op=UNLOAD Jul 14 22:47:54.747000 audit: BPF prog-id=207 op=UNLOAD Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { perfmon } for pid=4575 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit[4575]: AVC avc: denied { bpf } for pid=4575 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:54.747000 audit: BPF prog-id=209 op=LOAD Jul 14 22:47:54.747000 audit[4575]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000213808 items=0 ppid=3807 pid=4575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:54.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864316234323466333161396239333938343361613863386432643234 Jul 14 22:47:54.939726 env[1204]: time="2025-07-14T22:47:54.939684512Z" level=info msg="StartContainer for \"8d1b424f31a9b939843aa8c8d2d242f26ea7e57b7f503d47b56e86b9722cfc73\" returns successfully" Jul 14 22:47:55.956051 kubelet[1950]: I0714 22:47:55.955909 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-66666fb6d-7dl4r" podStartSLOduration=29.525789092 podStartE2EDuration="37.955892264s" podCreationTimestamp="2025-07-14 22:47:18 +0000 UTC" firstStartedPulling="2025-07-14 22:47:46.272754661 +0000 UTC m=+49.315095465" lastFinishedPulling="2025-07-14 22:47:54.702857833 +0000 UTC m=+57.745198637" observedRunningTime="2025-07-14 22:47:55.954815905 +0000 UTC m=+58.997156709" watchObservedRunningTime="2025-07-14 22:47:55.955892264 +0000 UTC m=+58.998233079" Jul 14 22:47:56.185000 audit[4615]: NETFILTER_CFG table=filter:119 family=2 entries=14 op=nft_register_rule pid=4615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:56.185000 audit[4615]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffeac159380 a2=0 a3=7ffeac15936c items=0 ppid=2059 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:56.185000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:56.190000 audit[4615]: NETFILTER_CFG table=nat:120 family=2 entries=20 op=nft_register_rule pid=4615 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:56.190000 audit[4615]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffeac159380 a2=0 a3=7ffeac15936c items=0 ppid=2059 pid=4615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:56.190000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:57.011000 audit[4586]: AVC avc: denied { watch } for pid=4586 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_47_33.2253964600/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c164,c611 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c164,c611 tclass=file permissive=0 Jul 14 22:47:57.011000 audit[4586]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f16fa0 a2=fc6 a3=0 items=0 ppid=3807 pid=4586 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c164,c611 key=(null) Jul 14 22:47:57.011000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:47:57.023071 env[1204]: time="2025-07-14T22:47:57.023031699Z" level=info msg="StopPodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\"" Jul 14 22:47:57.063000 audit[4639]: NETFILTER_CFG table=filter:121 family=2 entries=13 op=nft_register_rule pid=4639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:57.063000 audit[4639]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdd8b0fa50 a2=0 a3=7ffdd8b0fa3c items=0 ppid=2059 pid=4639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:57.063000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:57.069000 audit[4639]: NETFILTER_CFG table=nat:122 family=2 entries=27 op=nft_register_chain pid=4639 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:47:57.069000 audit[4639]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffdd8b0fa50 a2=0 a3=7ffdd8b0fa3c items=0 ppid=2059 pid=4639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:57.069000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.090 [WARNING][4630] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--j7g99-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8daac05b-2fb1-4779-a14d-bff0eae51684", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80", Pod:"goldmane-768f4c5c69-j7g99", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1c5c775a5ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.090 [INFO][4630] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.090 [INFO][4630] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" iface="eth0" netns="" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.090 [INFO][4630] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.090 [INFO][4630] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.123 [INFO][4642] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.124 [INFO][4642] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.124 [INFO][4642] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.129 [WARNING][4642] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.129 [INFO][4642] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.130 [INFO][4642] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.134790 env[1204]: 2025-07-14 22:47:57.132 [INFO][4630] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.135245 env[1204]: time="2025-07-14T22:47:57.134839800Z" level=info msg="TearDown network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" successfully" Jul 14 22:47:57.135245 env[1204]: time="2025-07-14T22:47:57.134873042Z" level=info msg="StopPodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" returns successfully" Jul 14 22:47:57.135418 env[1204]: time="2025-07-14T22:47:57.135381697Z" level=info msg="RemovePodSandbox for \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\"" Jul 14 22:47:57.135476 env[1204]: time="2025-07-14T22:47:57.135423475Z" level=info msg="Forcibly stopping sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\"" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.173 [WARNING][4660] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--j7g99-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"8daac05b-2fb1-4779-a14d-bff0eae51684", ResourceVersion:"1008", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 20, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80", Pod:"goldmane-768f4c5c69-j7g99", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali1c5c775a5ba", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.173 [INFO][4660] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.173 [INFO][4660] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" iface="eth0" netns="" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.173 [INFO][4660] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.173 [INFO][4660] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.190 [INFO][4669] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.190 [INFO][4669] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.190 [INFO][4669] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.196 [WARNING][4669] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.196 [INFO][4669] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" HandleID="k8s-pod-network.379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Workload="localhost-k8s-goldmane--768f4c5c69--j7g99-eth0" Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.197 [INFO][4669] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.201006 env[1204]: 2025-07-14 22:47:57.199 [INFO][4660] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2" Jul 14 22:47:57.201473 env[1204]: time="2025-07-14T22:47:57.201027773Z" level=info msg="TearDown network for sandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" successfully" Jul 14 22:47:57.205674 env[1204]: time="2025-07-14T22:47:57.205605280Z" level=info msg="RemovePodSandbox \"379cafaabcc57e2b46988767d3d8dfd734f4fe3c4e6576572cffc257dc21c4a2\" returns successfully" Jul 14 22:47:57.206127 env[1204]: time="2025-07-14T22:47:57.206092253Z" level=info msg="StopPodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\"" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.234 [WARNING][4687] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" WorkloadEndpoint="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.234 [INFO][4687] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.234 [INFO][4687] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" iface="eth0" netns="" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.234 [INFO][4687] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.234 [INFO][4687] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.251 [INFO][4696] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.251 [INFO][4696] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.251 [INFO][4696] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.256 [WARNING][4696] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.256 [INFO][4696] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.257 [INFO][4696] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.260338 env[1204]: 2025-07-14 22:47:57.258 [INFO][4687] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.260914 env[1204]: time="2025-07-14T22:47:57.260375012Z" level=info msg="TearDown network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" successfully" Jul 14 22:47:57.260914 env[1204]: time="2025-07-14T22:47:57.260405870Z" level=info msg="StopPodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" returns successfully" Jul 14 22:47:57.260914 env[1204]: time="2025-07-14T22:47:57.260868539Z" level=info msg="RemovePodSandbox for \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\"" Jul 14 22:47:57.260914 env[1204]: time="2025-07-14T22:47:57.260892564Z" level=info msg="Forcibly stopping sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\"" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.286 [WARNING][4713] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" WorkloadEndpoint="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.286 [INFO][4713] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.286 [INFO][4713] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" iface="eth0" netns="" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.286 [INFO][4713] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.286 [INFO][4713] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.303 [INFO][4722] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.303 [INFO][4722] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.303 [INFO][4722] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.308 [WARNING][4722] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.308 [INFO][4722] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" HandleID="k8s-pod-network.a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Workload="localhost-k8s-whisker--6699bd5d6c--7hkp9-eth0" Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.309 [INFO][4722] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.312502 env[1204]: 2025-07-14 22:47:57.310 [INFO][4713] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea" Jul 14 22:47:57.312502 env[1204]: time="2025-07-14T22:47:57.312436154Z" level=info msg="TearDown network for sandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" successfully" Jul 14 22:47:57.316546 env[1204]: time="2025-07-14T22:47:57.316491462Z" level=info msg="RemovePodSandbox \"a9ecb4e298e429547aedb92a4435fd96b74e378fab72fa66d8fadb399276d3ea\" returns successfully" Jul 14 22:47:57.316897 env[1204]: time="2025-07-14T22:47:57.316861806Z" level=info msg="StopPodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\"" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.345 [WARNING][4739] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sxff4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"77a73afb-9132-4fa9-83f4-003723533a93", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff", Pod:"coredns-668d6bf9bc-sxff4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ee3f805cc1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.345 [INFO][4739] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.345 [INFO][4739] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" iface="eth0" netns="" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.345 [INFO][4739] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.345 [INFO][4739] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.362 [INFO][4749] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.362 [INFO][4749] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.362 [INFO][4749] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.367 [WARNING][4749] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.367 [INFO][4749] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.368 [INFO][4749] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.371301 env[1204]: 2025-07-14 22:47:57.369 [INFO][4739] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.371928 env[1204]: time="2025-07-14T22:47:57.371313132Z" level=info msg="TearDown network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" successfully" Jul 14 22:47:57.371928 env[1204]: time="2025-07-14T22:47:57.371348017Z" level=info msg="StopPodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" returns successfully" Jul 14 22:47:57.371928 env[1204]: time="2025-07-14T22:47:57.371638212Z" level=info msg="RemovePodSandbox for \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\"" Jul 14 22:47:57.371928 env[1204]: time="2025-07-14T22:47:57.371668889Z" level=info msg="Forcibly stopping sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\"" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.399 [WARNING][4768] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--sxff4-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"77a73afb-9132-4fa9-83f4-003723533a93", ResourceVersion:"1059", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1a7c8cdb8bb1d84a08af961c1397dbb2064202394041cec5dee3e72fb4c7cdff", Pod:"coredns-668d6bf9bc-sxff4", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali7ee3f805cc1", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.399 [INFO][4768] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.399 [INFO][4768] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" iface="eth0" netns="" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.399 [INFO][4768] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.399 [INFO][4768] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.417 [INFO][4777] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.417 [INFO][4777] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.417 [INFO][4777] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.422 [WARNING][4777] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.422 [INFO][4777] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" HandleID="k8s-pod-network.2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Workload="localhost-k8s-coredns--668d6bf9bc--sxff4-eth0" Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.423 [INFO][4777] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.426296 env[1204]: 2025-07-14 22:47:57.424 [INFO][4768] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2" Jul 14 22:47:57.426784 env[1204]: time="2025-07-14T22:47:57.426305102Z" level=info msg="TearDown network for sandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" successfully" Jul 14 22:47:57.430110 env[1204]: time="2025-07-14T22:47:57.430077719Z" level=info msg="RemovePodSandbox \"2b7f7d081c982d0418098a199887587d5b4c85ace1dc9ee09bef6416817e36c2\" returns successfully" Jul 14 22:47:57.430505 env[1204]: time="2025-07-14T22:47:57.430482067Z" level=info msg="StopPodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\"" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.461 [WARNING][4794] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdgzk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8727a635-0d5f-4f08-b7a4-2a66134d8eff", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21", Pod:"csi-node-driver-bdgzk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fa8417b462", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.461 [INFO][4794] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.461 [INFO][4794] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" iface="eth0" netns="" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.461 [INFO][4794] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.461 [INFO][4794] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.493 [INFO][4803] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.494 [INFO][4803] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.494 [INFO][4803] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.502 [WARNING][4803] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.502 [INFO][4803] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.504 [INFO][4803] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.506771 env[1204]: 2025-07-14 22:47:57.505 [INFO][4794] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.506771 env[1204]: time="2025-07-14T22:47:57.506760519Z" level=info msg="TearDown network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" successfully" Jul 14 22:47:57.507269 env[1204]: time="2025-07-14T22:47:57.506788641Z" level=info msg="StopPodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" returns successfully" Jul 14 22:47:57.507269 env[1204]: time="2025-07-14T22:47:57.507192909Z" level=info msg="RemovePodSandbox for \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\"" Jul 14 22:47:57.507269 env[1204]: time="2025-07-14T22:47:57.507215682Z" level=info msg="Forcibly stopping sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\"" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.533 [WARNING][4821] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdgzk-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"8727a635-0d5f-4f08-b7a4-2a66134d8eff", ResourceVersion:"1041", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21", Pod:"csi-node-driver-bdgzk", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali1fa8417b462", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.534 [INFO][4821] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.534 [INFO][4821] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" iface="eth0" netns="" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.534 [INFO][4821] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.534 [INFO][4821] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.556 [INFO][4831] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.556 [INFO][4831] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.556 [INFO][4831] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.561 [WARNING][4831] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.561 [INFO][4831] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" HandleID="k8s-pod-network.5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Workload="localhost-k8s-csi--node--driver--bdgzk-eth0" Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.562 [INFO][4831] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.566825 env[1204]: 2025-07-14 22:47:57.564 [INFO][4821] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7" Jul 14 22:47:57.566825 env[1204]: time="2025-07-14T22:47:57.566765973Z" level=info msg="TearDown network for sandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" successfully" Jul 14 22:47:57.570343 env[1204]: time="2025-07-14T22:47:57.570295023Z" level=info msg="RemovePodSandbox \"5e4038d032e1796bdf33d47efeeecfea386a67543d43cfb1681c6fe12187fdf7\" returns successfully" Jul 14 22:47:57.570747 env[1204]: time="2025-07-14T22:47:57.570722966Z" level=info msg="StopPodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\"" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.604 [WARNING][4850] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b1f43e8-e77f-43a1-ba40-772e672f0eef", ResourceVersion:"1140", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4", Pod:"calico-apiserver-66666fb6d-7dl4r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calida200756d33", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.604 [INFO][4850] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.604 [INFO][4850] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" iface="eth0" netns="" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.604 [INFO][4850] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.604 [INFO][4850] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.628 [INFO][4860] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.628 [INFO][4860] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.628 [INFO][4860] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.634 [WARNING][4860] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.634 [INFO][4860] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.636 [INFO][4860] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.639473 env[1204]: 2025-07-14 22:47:57.637 [INFO][4850] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.640004 env[1204]: time="2025-07-14T22:47:57.639486650Z" level=info msg="TearDown network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" successfully" Jul 14 22:47:57.640004 env[1204]: time="2025-07-14T22:47:57.639517959Z" level=info msg="StopPodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" returns successfully" Jul 14 22:47:57.640004 env[1204]: time="2025-07-14T22:47:57.639975607Z" level=info msg="RemovePodSandbox for \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\"" Jul 14 22:47:57.640075 env[1204]: time="2025-07-14T22:47:57.640012867Z" level=info msg="Forcibly stopping sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\"" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.668 [WARNING][4878] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"9b1f43e8-e77f-43a1-ba40-772e672f0eef", ResourceVersion:"1140", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a4cb96ac08c9b8f5f05f721d3bde1fecbed85d48e946cd11051d04f31a19ecb4", Pod:"calico-apiserver-66666fb6d-7dl4r", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calida200756d33", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.668 [INFO][4878] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.668 [INFO][4878] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" iface="eth0" netns="" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.668 [INFO][4878] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.668 [INFO][4878] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.691 [INFO][4887] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.691 [INFO][4887] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.691 [INFO][4887] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.701 [WARNING][4887] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.701 [INFO][4887] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" HandleID="k8s-pod-network.992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Workload="localhost-k8s-calico--apiserver--66666fb6d--7dl4r-eth0" Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.703 [INFO][4887] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.707968 env[1204]: 2025-07-14 22:47:57.704 [INFO][4878] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75" Jul 14 22:47:57.708452 env[1204]: time="2025-07-14T22:47:57.707987361Z" level=info msg="TearDown network for sandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" successfully" Jul 14 22:47:57.711890 env[1204]: time="2025-07-14T22:47:57.711859394Z" level=info msg="RemovePodSandbox \"992d78832580d0c92a976fa3969fb46e28815d912c3a201543751fd7de7b0a75\" returns successfully" Jul 14 22:47:57.712421 env[1204]: time="2025-07-14T22:47:57.712369862Z" level=info msg="StopPodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\"" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.746 [WARNING][4905] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0", GenerateName:"calico-kube-controllers-f498f6dc-", Namespace:"calico-system", SelfLink:"", UID:"81e1b119-f229-4f94-b2d8-c7b7a938e151", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f498f6dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7", Pod:"calico-kube-controllers-f498f6dc-7zpk5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif0870779e19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.746 [INFO][4905] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.746 [INFO][4905] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" iface="eth0" netns="" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.746 [INFO][4905] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.746 [INFO][4905] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.768 [INFO][4915] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.768 [INFO][4915] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.768 [INFO][4915] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.774 [WARNING][4915] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.774 [INFO][4915] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.775 [INFO][4915] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.779826 env[1204]: 2025-07-14 22:47:57.778 [INFO][4905] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.780279 env[1204]: time="2025-07-14T22:47:57.779857973Z" level=info msg="TearDown network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" successfully" Jul 14 22:47:57.780279 env[1204]: time="2025-07-14T22:47:57.779889302Z" level=info msg="StopPodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" returns successfully" Jul 14 22:47:57.780426 env[1204]: time="2025-07-14T22:47:57.780390392Z" level=info msg="RemovePodSandbox for \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\"" Jul 14 22:47:57.780476 env[1204]: time="2025-07-14T22:47:57.780433904Z" level=info msg="Forcibly stopping sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\"" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.811 [WARNING][4934] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0", GenerateName:"calico-kube-controllers-f498f6dc-", Namespace:"calico-system", SelfLink:"", UID:"81e1b119-f229-4f94-b2d8-c7b7a938e151", ResourceVersion:"1114", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 21, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"f498f6dc", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"9e9a2223276510b255fe4c79de1fa762b6e94709cfd1249a07c131b8f42efff7", Pod:"calico-kube-controllers-f498f6dc-7zpk5", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"calif0870779e19", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.811 [INFO][4934] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.811 [INFO][4934] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" iface="eth0" netns="" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.811 [INFO][4934] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.811 [INFO][4934] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.832 [INFO][4942] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.832 [INFO][4942] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.832 [INFO][4942] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.837 [WARNING][4942] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.837 [INFO][4942] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" HandleID="k8s-pod-network.2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Workload="localhost-k8s-calico--kube--controllers--f498f6dc--7zpk5-eth0" Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.839 [INFO][4942] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.843699 env[1204]: 2025-07-14 22:47:57.841 [INFO][4934] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be" Jul 14 22:47:57.843699 env[1204]: time="2025-07-14T22:47:57.843655792Z" level=info msg="TearDown network for sandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" successfully" Jul 14 22:47:57.917588 env[1204]: time="2025-07-14T22:47:57.917512400Z" level=info msg="RemovePodSandbox \"2bfcbbe8a6ed0c98418da0aa3606e7dee91fcfc9e9a521137c7e426a819414be\" returns successfully" Jul 14 22:47:57.918035 env[1204]: time="2025-07-14T22:47:57.917995196Z" level=info msg="StopPodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\"" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.948 [WARNING][4959] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc", Pod:"calico-apiserver-66666fb6d-jv8ws", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f0d1d24b60", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.948 [INFO][4959] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.948 [INFO][4959] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" iface="eth0" netns="" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.948 [INFO][4959] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.948 [INFO][4959] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.970 [INFO][4968] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.970 [INFO][4968] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.970 [INFO][4968] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.976 [WARNING][4968] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.976 [INFO][4968] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.977 [INFO][4968] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:57.980830 env[1204]: 2025-07-14 22:47:57.979 [INFO][4959] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:57.981438 env[1204]: time="2025-07-14T22:47:57.980844485Z" level=info msg="TearDown network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" successfully" Jul 14 22:47:57.981438 env[1204]: time="2025-07-14T22:47:57.980876335Z" level=info msg="StopPodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" returns successfully" Jul 14 22:47:57.981438 env[1204]: time="2025-07-14T22:47:57.981319095Z" level=info msg="RemovePodSandbox for \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\"" Jul 14 22:47:57.981438 env[1204]: time="2025-07-14T22:47:57.981354492Z" level=info msg="Forcibly stopping sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\"" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.019 [WARNING][4988] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0", GenerateName:"calico-apiserver-66666fb6d-", Namespace:"calico-apiserver", SelfLink:"", UID:"e1fa90dd-8e5c-41ef-bc25-ac9a4f546f84", ResourceVersion:"1032", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 18, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"66666fb6d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc", Pod:"calico-apiserver-66666fb6d-jv8ws", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali7f0d1d24b60", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.020 [INFO][4988] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.020 [INFO][4988] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" iface="eth0" netns="" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.020 [INFO][4988] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.020 [INFO][4988] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.036 [INFO][4998] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.036 [INFO][4998] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.036 [INFO][4998] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.042 [WARNING][4998] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.042 [INFO][4998] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" HandleID="k8s-pod-network.5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Workload="localhost-k8s-calico--apiserver--66666fb6d--jv8ws-eth0" Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.044 [INFO][4998] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:58.048579 env[1204]: 2025-07-14 22:47:58.045 [INFO][4988] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66" Jul 14 22:47:58.049263 env[1204]: time="2025-07-14T22:47:58.048619671Z" level=info msg="TearDown network for sandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" successfully" Jul 14 22:47:58.053387 env[1204]: time="2025-07-14T22:47:58.053336008Z" level=info msg="RemovePodSandbox \"5abd20102bb8b20212c43c2bb6b3b96c17cad47c68011636d3adb32656c19b66\" returns successfully" Jul 14 22:47:58.054092 env[1204]: time="2025-07-14T22:47:58.054058644Z" level=info msg="StopPodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\"" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.110 [WARNING][5018] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5ee219b8-da54-48a0-b525-adcb85b9c9a7", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f", Pod:"coredns-668d6bf9bc-cbzv8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif3fff7a3409", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.111 [INFO][5018] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.111 [INFO][5018] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" iface="eth0" netns="" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.111 [INFO][5018] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.111 [INFO][5018] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.247 [INFO][5027] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.247 [INFO][5027] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.247 [INFO][5027] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.253 [WARNING][5027] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.253 [INFO][5027] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.254 [INFO][5027] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:58.259450 env[1204]: 2025-07-14 22:47:58.256 [INFO][5018] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.259450 env[1204]: time="2025-07-14T22:47:58.259086721Z" level=info msg="TearDown network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" successfully" Jul 14 22:47:58.259450 env[1204]: time="2025-07-14T22:47:58.259116787Z" level=info msg="StopPodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" returns successfully" Jul 14 22:47:58.260633 env[1204]: time="2025-07-14T22:47:58.259639258Z" level=info msg="RemovePodSandbox for \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\"" Jul 14 22:47:58.260633 env[1204]: time="2025-07-14T22:47:58.259666328Z" level=info msg="Forcibly stopping sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\"" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.292 [WARNING][5046] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0", GenerateName:"coredns-668d6bf9bc-", Namespace:"kube-system", SelfLink:"", UID:"5ee219b8-da54-48a0-b525-adcb85b9c9a7", ResourceVersion:"1093", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 22, 47, 4, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"668d6bf9bc", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"bb93dd94e4faddc6094367e365d7ff8e539b342f82e8d18899fb1d5780c9d41f", Pod:"coredns-668d6bf9bc-cbzv8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"calif3fff7a3409", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.292 [INFO][5046] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.292 [INFO][5046] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" iface="eth0" netns="" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.292 [INFO][5046] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.293 [INFO][5046] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.312 [INFO][5054] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.312 [INFO][5054] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.312 [INFO][5054] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.317 [WARNING][5054] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.317 [INFO][5054] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" HandleID="k8s-pod-network.f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Workload="localhost-k8s-coredns--668d6bf9bc--cbzv8-eth0" Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.318 [INFO][5054] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 22:47:58.322725 env[1204]: 2025-07-14 22:47:58.320 [INFO][5046] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7" Jul 14 22:47:58.323357 env[1204]: time="2025-07-14T22:47:58.323323167Z" level=info msg="TearDown network for sandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" successfully" Jul 14 22:47:58.327225 env[1204]: time="2025-07-14T22:47:58.327184581Z" level=info msg="RemovePodSandbox \"f64b2761e2ec722b6efa96b5a0ae70779af0b0078f3ea7d5e1429b755a5bf7c7\" returns successfully" Jul 14 22:47:58.930499 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1371836030.mount: Deactivated successfully. Jul 14 22:47:59.432813 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 14 22:47:59.432925 kernel: audit: type=1130 audit(1752533279.425:1435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.3:22-10.0.0.1:56070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:59.425000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.3:22-10.0.0.1:56070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:59.426386 systemd[1]: Started sshd@13-10.0.0.3:22-10.0.0.1:56070.service. Jul 14 22:47:59.458000 audit[5064]: USER_ACCT pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.462000 audit[5064]: CRED_ACQ pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.463436 sshd[5064]: Accepted publickey for core from 10.0.0.1 port 56070 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:47:59.463658 kernel: audit: type=1101 audit(1752533279.458:1436): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.463687 kernel: audit: type=1103 audit(1752533279.462:1437): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.463763 sshd[5064]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:47:59.469797 kernel: audit: type=1006 audit(1752533279.462:1438): pid=5064 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 14 22:47:59.469847 kernel: audit: type=1300 audit(1752533279.462:1438): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed4cc2b90 a2=3 a3=0 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.462000 audit[5064]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed4cc2b90 a2=3 a3=0 items=0 ppid=1 pid=5064 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.469565 systemd-logind[1194]: New session 14 of user core. Jul 14 22:47:59.470106 systemd[1]: Started session-14.scope. Jul 14 22:47:59.475244 kernel: audit: type=1327 audit(1752533279.462:1438): proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:59.462000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:47:59.479901 kernel: audit: type=1105 audit(1752533279.473:1439): pid=5064 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.473000 audit[5064]: USER_START pid=5064 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.474000 audit[5066]: CRED_ACQ pid=5066 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.483569 kernel: audit: type=1103 audit(1752533279.474:1440): pid=5066 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.683103 sshd[5064]: pam_unix(sshd:session): session closed for user core Jul 14 22:47:59.683000 audit[5064]: USER_END pid=5064 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.686148 systemd[1]: sshd@13-10.0.0.3:22-10.0.0.1:56070.service: Deactivated successfully. Jul 14 22:47:59.686969 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 22:47:59.687722 systemd-logind[1194]: Session 14 logged out. Waiting for processes to exit. Jul 14 22:47:59.688484 systemd-logind[1194]: Removed session 14. Jul 14 22:47:59.683000 audit[5064]: CRED_DISP pid=5064 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.692222 kernel: audit: type=1106 audit(1752533279.683:1441): pid=5064 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.692290 kernel: audit: type=1104 audit(1752533279.683:1442): pid=5064 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:47:59.683000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-10.0.0.3:22-10.0.0.1:56070 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:47:59.900861 env[1204]: time="2025-07-14T22:47:59.900819373Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:59.903001 env[1204]: time="2025-07-14T22:47:59.902949932Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:59.904552 env[1204]: time="2025-07-14T22:47:59.904521933Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:59.905858 env[1204]: time="2025-07-14T22:47:59.905827645Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:47:59.906307 env[1204]: time="2025-07-14T22:47:59.906277031Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 14 22:47:59.907225 env[1204]: time="2025-07-14T22:47:59.907207161Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 22:47:59.908145 env[1204]: time="2025-07-14T22:47:59.908122805Z" level=info msg="CreateContainer within sandbox \"64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 22:47:59.919009 env[1204]: time="2025-07-14T22:47:59.918969324Z" level=info msg="CreateContainer within sandbox \"64df4c3986dccc74ef539a614fce3cbb7543bef8cdf09d0a81058a8edf31db80\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"a0116fd405f6e159ce96bbb8be9db584e892306c47be4f422d66b5e50b6cc46b\"" Jul 14 22:47:59.919566 env[1204]: time="2025-07-14T22:47:59.919547349Z" level=info msg="StartContainer for \"a0116fd405f6e159ce96bbb8be9db584e892306c47be4f422d66b5e50b6cc46b\"" Jul 14 22:47:59.937819 systemd[1]: Started cri-containerd-a0116fd405f6e159ce96bbb8be9db584e892306c47be4f422d66b5e50b6cc46b.scope. Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit: BPF prog-id=210 op=LOAD Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3859 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130313136666434303566366531353963653936626262386265396462 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3859 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130313136666434303566366531353963653936626262386265396462 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit: BPF prog-id=211 op=LOAD Jul 14 22:47:59.946000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000378ad0 items=0 ppid=3859 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130313136666434303566366531353963653936626262386265396462 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.946000 audit: BPF prog-id=212 op=LOAD Jul 14 22:47:59.946000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000378b18 items=0 ppid=3859 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.946000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130313136666434303566366531353963653936626262386265396462 Jul 14 22:47:59.947000 audit: BPF prog-id=212 op=UNLOAD Jul 14 22:47:59.947000 audit: BPF prog-id=211 op=UNLOAD Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { perfmon } for pid=5084 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit[5084]: AVC avc: denied { bpf } for pid=5084 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:47:59.947000 audit: BPF prog-id=213 op=LOAD Jul 14 22:47:59.947000 audit[5084]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000378f28 items=0 ppid=3859 pid=5084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:47:59.947000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6130313136666434303566366531353963653936626262386265396462 Jul 14 22:47:59.970056 env[1204]: time="2025-07-14T22:47:59.970019762Z" level=info msg="StartContainer for \"a0116fd405f6e159ce96bbb8be9db584e892306c47be4f422d66b5e50b6cc46b\" returns successfully" Jul 14 22:48:00.403000 audit[5126]: NETFILTER_CFG table=filter:123 family=2 entries=12 op=nft_register_rule pid=5126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:00.403000 audit[5126]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc9638ce10 a2=0 a3=7ffc9638cdfc items=0 ppid=2059 pid=5126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:00.403000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:00.410000 audit[5126]: NETFILTER_CFG table=nat:124 family=2 entries=22 op=nft_register_rule pid=5126 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:00.410000 audit[5126]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffc9638ce10 a2=0 a3=7ffc9638cdfc items=0 ppid=2059 pid=5126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:00.410000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:48:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:48:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001782980 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:48:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:48:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002a36960 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:48:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:48:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:48:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001596640 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:48:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:48:00.952000 audit[1810]: AVC avc: denied { watch } for pid=1810 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="vda9" ino=520972 scontext=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 22:48:00.952000 audit[1810]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015966c0 a2=fc6 a3=0 items=0 ppid=1676 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c268,c650 key=(null) Jul 14 22:48:00.952000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 22:48:02.891787 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3681863688.mount: Deactivated successfully. Jul 14 22:48:02.907728 env[1204]: time="2025-07-14T22:48:02.907693246Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:02.909773 env[1204]: time="2025-07-14T22:48:02.909750970Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:02.911307 env[1204]: time="2025-07-14T22:48:02.911272334Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:02.913086 env[1204]: time="2025-07-14T22:48:02.913061277Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:02.913495 env[1204]: time="2025-07-14T22:48:02.913458488Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 14 22:48:02.914488 env[1204]: time="2025-07-14T22:48:02.914468909Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 22:48:02.917309 env[1204]: time="2025-07-14T22:48:02.917276599Z" level=info msg="CreateContainer within sandbox \"5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 22:48:02.929677 env[1204]: time="2025-07-14T22:48:02.929632184Z" level=info msg="CreateContainer within sandbox \"5ae99a843f6bb3ee40bc523352afdbe06b23625b929d656138c3a70bea950bc8\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"0ec7bf717496ef0f6caafbae19feaddb93f45c52d0401c50316b3c951ccf7980\"" Jul 14 22:48:02.931180 env[1204]: time="2025-07-14T22:48:02.930314449Z" level=info msg="StartContainer for \"0ec7bf717496ef0f6caafbae19feaddb93f45c52d0401c50316b3c951ccf7980\"" Jul 14 22:48:02.947225 systemd[1]: Started cri-containerd-0ec7bf717496ef0f6caafbae19feaddb93f45c52d0401c50316b3c951ccf7980.scope. Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.960000 audit: BPF prog-id=214 op=LOAD Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3536 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:02.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065633762663731373439366566306636636161666261653139666561 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3536 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:02.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065633762663731373439366566306636636161666261653139666561 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit: BPF prog-id=215 op=LOAD Jul 14 22:48:02.961000 audit[5166]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000321980 items=0 ppid=3536 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:02.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065633762663731373439366566306636636161666261653139666561 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit: BPF prog-id=216 op=LOAD Jul 14 22:48:02.961000 audit[5166]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003219c8 items=0 ppid=3536 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:02.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065633762663731373439366566306636636161666261653139666561 Jul 14 22:48:02.961000 audit: BPF prog-id=216 op=UNLOAD Jul 14 22:48:02.961000 audit: BPF prog-id=215 op=UNLOAD Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { perfmon } for pid=5166 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit[5166]: AVC avc: denied { bpf } for pid=5166 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:02.961000 audit: BPF prog-id=217 op=LOAD Jul 14 22:48:02.961000 audit[5166]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000321dd8 items=0 ppid=3536 pid=5166 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:02.961000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3065633762663731373439366566306636636161666261653139666561 Jul 14 22:48:02.990621 env[1204]: time="2025-07-14T22:48:02.990423554Z" level=info msg="StartContainer for \"0ec7bf717496ef0f6caafbae19feaddb93f45c52d0401c50316b3c951ccf7980\" returns successfully" Jul 14 22:48:03.301900 env[1204]: time="2025-07-14T22:48:03.301794173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:03.304146 env[1204]: time="2025-07-14T22:48:03.304110846Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:03.305887 env[1204]: time="2025-07-14T22:48:03.305867423Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:03.309728 env[1204]: time="2025-07-14T22:48:03.309695687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:03.310279 env[1204]: time="2025-07-14T22:48:03.310250032Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 22:48:03.311338 env[1204]: time="2025-07-14T22:48:03.311308675Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 22:48:03.312134 env[1204]: time="2025-07-14T22:48:03.312108457Z" level=info msg="CreateContainer within sandbox \"0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 22:48:03.324479 env[1204]: time="2025-07-14T22:48:03.324409363Z" level=info msg="CreateContainer within sandbox \"0644fbf88657420fb79c1e284aefc7c827256833e3ad5e9989b5cb3d317593bc\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"e39a0275a5021e07458f1c37768b767bfbd8d32fb5106ebfda12dd1e2d8d636d\"" Jul 14 22:48:03.325077 env[1204]: time="2025-07-14T22:48:03.325048202Z" level=info msg="StartContainer for \"e39a0275a5021e07458f1c37768b767bfbd8d32fb5106ebfda12dd1e2d8d636d\"" Jul 14 22:48:03.345252 systemd[1]: Started cri-containerd-e39a0275a5021e07458f1c37768b767bfbd8d32fb5106ebfda12dd1e2d8d636d.scope. Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.352000 audit: BPF prog-id=218 op=LOAD Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4110 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396130323735613530323165303734353866316333373736386237 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=4110 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396130323735613530323165303734353866316333373736386237 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit: BPF prog-id=219 op=LOAD Jul 14 22:48:03.353000 audit[5204]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003c82f0 items=0 ppid=4110 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396130323735613530323165303734353866316333373736386237 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit: BPF prog-id=220 op=LOAD Jul 14 22:48:03.353000 audit[5204]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003c8338 items=0 ppid=4110 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396130323735613530323165303734353866316333373736386237 Jul 14 22:48:03.353000 audit: BPF prog-id=220 op=UNLOAD Jul 14 22:48:03.353000 audit: BPF prog-id=219 op=UNLOAD Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { perfmon } for pid=5204 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit[5204]: AVC avc: denied { bpf } for pid=5204 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:03.353000 audit: BPF prog-id=221 op=LOAD Jul 14 22:48:03.353000 audit[5204]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003c8748 items=0 ppid=4110 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.353000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6533396130323735613530323165303734353866316333373736386237 Jul 14 22:48:03.379660 env[1204]: time="2025-07-14T22:48:03.379619077Z" level=info msg="StartContainer for \"e39a0275a5021e07458f1c37768b767bfbd8d32fb5106ebfda12dd1e2d8d636d\" returns successfully" Jul 14 22:48:03.403540 kubelet[1950]: I0714 22:48:03.403421 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-66666fb6d-jv8ws" podStartSLOduration=29.959475499 podStartE2EDuration="45.401487478s" podCreationTimestamp="2025-07-14 22:47:18 +0000 UTC" firstStartedPulling="2025-07-14 22:47:47.869168097 +0000 UTC m=+50.911508901" lastFinishedPulling="2025-07-14 22:48:03.311180076 +0000 UTC m=+66.353520880" observedRunningTime="2025-07-14 22:48:03.401141517 +0000 UTC m=+66.443482311" watchObservedRunningTime="2025-07-14 22:48:03.401487478 +0000 UTC m=+66.443828282" Jul 14 22:48:03.403924 kubelet[1950]: I0714 22:48:03.403813 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-j7g99" podStartSLOduration=29.879283124 podStartE2EDuration="43.403802156s" podCreationTimestamp="2025-07-14 22:47:20 +0000 UTC" firstStartedPulling="2025-07-14 22:47:46.382567604 +0000 UTC m=+49.424908398" lastFinishedPulling="2025-07-14 22:47:59.907086626 +0000 UTC m=+62.949427430" observedRunningTime="2025-07-14 22:48:00.393091083 +0000 UTC m=+63.435431887" watchObservedRunningTime="2025-07-14 22:48:03.403802156 +0000 UTC m=+66.446142961" Jul 14 22:48:03.407000 audit[5234]: NETFILTER_CFG table=filter:125 family=2 entries=12 op=nft_register_rule pid=5234 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:03.407000 audit[5234]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffe9fea8290 a2=0 a3=7ffe9fea827c items=0 ppid=2059 pid=5234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.407000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:03.414348 kubelet[1950]: I0714 22:48:03.414295 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-78f947c8f-clm96" podStartSLOduration=1.59815648 podStartE2EDuration="19.414276391s" podCreationTimestamp="2025-07-14 22:47:44 +0000 UTC" firstStartedPulling="2025-07-14 22:47:45.098211482 +0000 UTC m=+48.140552286" lastFinishedPulling="2025-07-14 22:48:02.914331362 +0000 UTC m=+65.956672197" observedRunningTime="2025-07-14 22:48:03.413322621 +0000 UTC m=+66.455663425" watchObservedRunningTime="2025-07-14 22:48:03.414276391 +0000 UTC m=+66.456617195" Jul 14 22:48:03.418000 audit[5234]: NETFILTER_CFG table=nat:126 family=2 entries=30 op=nft_register_rule pid=5234 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:03.418000 audit[5234]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffe9fea8290 a2=0 a3=7ffe9fea827c items=0 ppid=2059 pid=5234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.418000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:03.431000 audit[5236]: NETFILTER_CFG table=filter:127 family=2 entries=11 op=nft_register_rule pid=5236 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:03.431000 audit[5236]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe74507c10 a2=0 a3=7ffe74507bfc items=0 ppid=2059 pid=5236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.431000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:03.441000 audit[5236]: NETFILTER_CFG table=nat:128 family=2 entries=29 op=nft_register_chain pid=5236 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:03.441000 audit[5236]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffe74507c10 a2=0 a3=7ffe74507bfc items=0 ppid=2059 pid=5236 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:03.441000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:04.156000 audit[5215]: AVC avc: denied { watch } for pid=5215 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_22_47_33.583426443/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c414 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c368,c414 tclass=file permissive=0 Jul 14 22:48:04.156000 audit[5215]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001456040 a2=fc6 a3=0 items=0 ppid=4110 pid=5215 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c414 key=(null) Jul 14 22:48:04.156000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 22:48:04.422000 audit[5246]: NETFILTER_CFG table=filter:129 family=2 entries=10 op=nft_register_rule pid=5246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:04.422000 audit[5246]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff4b837b10 a2=0 a3=7fff4b837afc items=0 ppid=2059 pid=5246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:04.422000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:04.426000 audit[5246]: NETFILTER_CFG table=nat:130 family=2 entries=36 op=nft_register_chain pid=5246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:04.429376 kernel: kauditd_printk_skb: 208 callbacks suppressed Jul 14 22:48:04.429412 kernel: audit: type=1325 audit(1752533284.426:1510): table=nat:130 family=2 entries=36 op=nft_register_chain pid=5246 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:04.426000 audit[5246]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff4b837b10 a2=0 a3=7fff4b837afc items=0 ppid=2059 pid=5246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:04.436396 kernel: audit: type=1300 audit(1752533284.426:1510): arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff4b837b10 a2=0 a3=7fff4b837afc items=0 ppid=2059 pid=5246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:04.436434 kernel: audit: type=1327 audit(1752533284.426:1510): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:04.426000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:04.688216 systemd[1]: Started sshd@14-10.0.0.3:22-10.0.0.1:56084.service. Jul 14 22:48:04.686000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.3:22-10.0.0.1:56084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:04.694555 kernel: audit: type=1130 audit(1752533284.686:1511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.3:22-10.0.0.1:56084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:04.721000 audit[5248]: USER_ACCT pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.723435 sshd[5248]: Accepted publickey for core from 10.0.0.1 port 56084 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:04.727076 sshd[5248]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:04.725000 audit[5248]: CRED_ACQ pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.730720 kernel: audit: type=1101 audit(1752533284.721:1512): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.730774 kernel: audit: type=1103 audit(1752533284.725:1513): pid=5248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.730797 kernel: audit: type=1006 audit(1752533284.725:1514): pid=5248 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 14 22:48:04.730411 systemd-logind[1194]: New session 15 of user core. Jul 14 22:48:04.731180 systemd[1]: Started session-15.scope. Jul 14 22:48:04.725000 audit[5248]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc44f35c40 a2=3 a3=0 items=0 ppid=1 pid=5248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:04.736585 kernel: audit: type=1300 audit(1752533284.725:1514): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc44f35c40 a2=3 a3=0 items=0 ppid=1 pid=5248 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:04.736639 kernel: audit: type=1327 audit(1752533284.725:1514): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:04.725000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:04.737835 kernel: audit: type=1105 audit(1752533284.733:1515): pid=5248 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.733000 audit[5248]: USER_START pid=5248 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.734000 audit[5250]: CRED_ACQ pid=5250 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.971228 sshd[5248]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:04.970000 audit[5248]: USER_END pid=5248 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.970000 audit[5248]: CRED_DISP pid=5248 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:04.972000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-10.0.0.3:22-10.0.0.1:56084 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:04.973557 systemd[1]: sshd@14-10.0.0.3:22-10.0.0.1:56084.service: Deactivated successfully. Jul 14 22:48:04.974214 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 22:48:04.974911 systemd-logind[1194]: Session 15 logged out. Waiting for processes to exit. Jul 14 22:48:04.975502 systemd-logind[1194]: Removed session 15. Jul 14 22:48:05.079673 env[1204]: time="2025-07-14T22:48:05.079623058Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:05.081937 env[1204]: time="2025-07-14T22:48:05.081890247Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:05.083289 env[1204]: time="2025-07-14T22:48:05.083239319Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:05.084736 env[1204]: time="2025-07-14T22:48:05.084711550Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:05.085160 env[1204]: time="2025-07-14T22:48:05.085121984Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 14 22:48:05.089301 env[1204]: time="2025-07-14T22:48:05.088293304Z" level=info msg="CreateContainer within sandbox \"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 22:48:05.102911 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount681112617.mount: Deactivated successfully. Jul 14 22:48:05.107095 env[1204]: time="2025-07-14T22:48:05.107033553Z" level=info msg="CreateContainer within sandbox \"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"cee91d13cbf8c07c278880d852c6be0fab3f3535e839026c6b13a64ff73cf2e1\"" Jul 14 22:48:05.107678 env[1204]: time="2025-07-14T22:48:05.107633134Z" level=info msg="StartContainer for \"cee91d13cbf8c07c278880d852c6be0fab3f3535e839026c6b13a64ff73cf2e1\"" Jul 14 22:48:05.128086 systemd[1]: Started cri-containerd-cee91d13cbf8c07c278880d852c6be0fab3f3535e839026c6b13a64ff73cf2e1.scope. Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001196b0 a2=3c a3=7ff41c3cdcc8 items=0 ppid=4233 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:05.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365653931643133636266386330376332373838383064383532633662 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.145000 audit: BPF prog-id=222 op=LOAD Jul 14 22:48:05.145000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001199d8 a2=78 a3=c000304b18 items=0 ppid=4233 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:05.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365653931643133636266386330376332373838383064383532633662 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit: BPF prog-id=223 op=LOAD Jul 14 22:48:05.146000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000119770 a2=78 a3=c000304b68 items=0 ppid=4233 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:05.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365653931643133636266386330376332373838383064383532633662 Jul 14 22:48:05.146000 audit: BPF prog-id=223 op=UNLOAD Jul 14 22:48:05.146000 audit: BPF prog-id=222 op=UNLOAD Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { perfmon } for pid=5272 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit[5272]: AVC avc: denied { bpf } for pid=5272 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:05.146000 audit: BPF prog-id=224 op=LOAD Jul 14 22:48:05.146000 audit[5272]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000119c30 a2=78 a3=c000304bf8 items=0 ppid=4233 pid=5272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:05.146000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365653931643133636266386330376332373838383064383532633662 Jul 14 22:48:05.201679 env[1204]: time="2025-07-14T22:48:05.201623469Z" level=info msg="StartContainer for \"cee91d13cbf8c07c278880d852c6be0fab3f3535e839026c6b13a64ff73cf2e1\" returns successfully" Jul 14 22:48:05.202742 env[1204]: time="2025-07-14T22:48:05.202714261Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 22:48:06.752807 env[1204]: time="2025-07-14T22:48:06.752753022Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:06.755010 env[1204]: time="2025-07-14T22:48:06.754960953Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:06.756742 env[1204]: time="2025-07-14T22:48:06.756717399Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:06.758247 env[1204]: time="2025-07-14T22:48:06.758220387Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 22:48:06.758618 env[1204]: time="2025-07-14T22:48:06.758587287Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 14 22:48:06.760640 env[1204]: time="2025-07-14T22:48:06.760609929Z" level=info msg="CreateContainer within sandbox \"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 22:48:06.774926 env[1204]: time="2025-07-14T22:48:06.774887685Z" level=info msg="CreateContainer within sandbox \"f320e03fa49dbc5aceabda22058189840341af054d2bcc587085500c0f926e21\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"336b78babb45a49f6a8e771967d65da3f3c8489c46c3d7c753101876e255f0d7\"" Jul 14 22:48:06.775339 env[1204]: time="2025-07-14T22:48:06.775282790Z" level=info msg="StartContainer for \"336b78babb45a49f6a8e771967d65da3f3c8489c46c3d7c753101876e255f0d7\"" Jul 14 22:48:06.796994 systemd[1]: run-containerd-runc-k8s.io-336b78babb45a49f6a8e771967d65da3f3c8489c46c3d7c753101876e255f0d7-runc.O3HsZs.mount: Deactivated successfully. Jul 14 22:48:06.799851 systemd[1]: Started cri-containerd-336b78babb45a49f6a8e771967d65da3f3c8489c46c3d7c753101876e255f0d7.scope. Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7efd40d6ff88 items=0 ppid=4233 pid=5307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:06.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333366237386261626234356134396636613865373731393637643635 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.812000 audit: BPF prog-id=225 op=LOAD Jul 14 22:48:06.812000 audit[5307]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003847c8 items=0 ppid=4233 pid=5307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:06.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333366237386261626234356134396636613865373731393637643635 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit: BPF prog-id=226 op=LOAD Jul 14 22:48:06.813000 audit[5307]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000384818 items=0 ppid=4233 pid=5307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:06.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333366237386261626234356134396636613865373731393637643635 Jul 14 22:48:06.813000 audit: BPF prog-id=226 op=UNLOAD Jul 14 22:48:06.813000 audit: BPF prog-id=225 op=UNLOAD Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { perfmon } for pid=5307 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit[5307]: AVC avc: denied { bpf } for pid=5307 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 22:48:06.813000 audit: BPF prog-id=227 op=LOAD Jul 14 22:48:06.813000 audit[5307]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003848a8 items=0 ppid=4233 pid=5307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:06.813000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3333366237386261626234356134396636613865373731393637643635 Jul 14 22:48:06.826445 env[1204]: time="2025-07-14T22:48:06.826402047Z" level=info msg="StartContainer for \"336b78babb45a49f6a8e771967d65da3f3c8489c46c3d7c753101876e255f0d7\" returns successfully" Jul 14 22:48:07.131506 kubelet[1950]: I0714 22:48:07.131468 1950 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 22:48:07.132054 kubelet[1950]: I0714 22:48:07.131511 1950 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 22:48:07.418395 kubelet[1950]: I0714 22:48:07.418265 1950 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-bdgzk" podStartSLOduration=27.662291076 podStartE2EDuration="46.418250514s" podCreationTimestamp="2025-07-14 22:47:21 +0000 UTC" firstStartedPulling="2025-07-14 22:47:48.003473074 +0000 UTC m=+51.045813878" lastFinishedPulling="2025-07-14 22:48:06.759432522 +0000 UTC m=+69.801773316" observedRunningTime="2025-07-14 22:48:07.41669124 +0000 UTC m=+70.459032064" watchObservedRunningTime="2025-07-14 22:48:07.418250514 +0000 UTC m=+70.460591318" Jul 14 22:48:09.975963 systemd[1]: Started sshd@15-10.0.0.3:22-10.0.0.1:52880.service. Jul 14 22:48:09.974000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.3:22-10.0.0.1:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:09.981252 kernel: kauditd_printk_skb: 90 callbacks suppressed Jul 14 22:48:09.981411 kernel: audit: type=1130 audit(1752533289.974:1532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.3:22-10.0.0.1:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:10.007000 audit[5342]: USER_ACCT pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.008894 sshd[5342]: Accepted publickey for core from 10.0.0.1 port 52880 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:10.012100 sshd[5342]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:10.010000 audit[5342]: CRED_ACQ pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.015513 systemd-logind[1194]: New session 16 of user core. Jul 14 22:48:10.015866 kernel: audit: type=1101 audit(1752533290.007:1533): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.015902 kernel: audit: type=1103 audit(1752533290.010:1534): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.015925 kernel: audit: type=1006 audit(1752533290.010:1535): pid=5342 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 14 22:48:10.016519 systemd[1]: Started session-16.scope. Jul 14 22:48:10.010000 audit[5342]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde1879520 a2=3 a3=0 items=0 ppid=1 pid=5342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:10.021752 kernel: audit: type=1300 audit(1752533290.010:1535): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde1879520 a2=3 a3=0 items=0 ppid=1 pid=5342 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:10.021798 kernel: audit: type=1327 audit(1752533290.010:1535): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:10.010000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:10.023034 kernel: audit: type=1105 audit(1752533290.019:1536): pid=5342 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.019000 audit[5342]: USER_START pid=5342 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.027043 kernel: audit: type=1103 audit(1752533290.020:1537): pid=5344 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.020000 audit[5344]: CRED_ACQ pid=5344 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.029996 kubelet[1950]: E0714 22:48:10.029956 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:48:10.210238 sshd[5342]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:10.209000 audit[5342]: USER_END pid=5342 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.212057 systemd[1]: sshd@15-10.0.0.3:22-10.0.0.1:52880.service: Deactivated successfully. Jul 14 22:48:10.212755 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 22:48:10.213252 systemd-logind[1194]: Session 16 logged out. Waiting for processes to exit. Jul 14 22:48:10.213935 systemd-logind[1194]: Removed session 16. Jul 14 22:48:10.209000 audit[5342]: CRED_DISP pid=5342 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.218695 kernel: audit: type=1106 audit(1752533290.209:1538): pid=5342 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.218864 kernel: audit: type=1104 audit(1752533290.209:1539): pid=5342 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:10.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-10.0.0.3:22-10.0.0.1:52880 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:11.028987 kubelet[1950]: E0714 22:48:11.028938 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:48:13.028975 kubelet[1950]: E0714 22:48:13.028944 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:48:14.344756 systemd[1]: run-containerd-runc-k8s.io-128567e160fd152ae979b106862e3f19992fa0a40a608fa14f5a1f082e67afac-runc.sT2Fit.mount: Deactivated successfully. Jul 14 22:48:15.214117 systemd[1]: Started sshd@16-10.0.0.3:22-10.0.0.1:52882.service. Jul 14 22:48:15.213000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.3:22-10.0.0.1:52882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:15.215606 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:48:15.215668 kernel: audit: type=1130 audit(1752533295.213:1541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.3:22-10.0.0.1:52882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:15.245000 audit[5379]: USER_ACCT pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.245704 sshd[5379]: Accepted publickey for core from 10.0.0.1 port 52882 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:15.249354 sshd[5379]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:15.248000 audit[5379]: CRED_ACQ pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.252796 systemd-logind[1194]: New session 17 of user core. Jul 14 22:48:15.253655 kernel: audit: type=1101 audit(1752533295.245:1542): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.253706 kernel: audit: type=1103 audit(1752533295.248:1543): pid=5379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.253756 kernel: audit: type=1006 audit(1752533295.248:1544): pid=5379 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 14 22:48:15.253769 systemd[1]: Started session-17.scope. Jul 14 22:48:15.256312 kernel: audit: type=1300 audit(1752533295.248:1544): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde7baa150 a2=3 a3=0 items=0 ppid=1 pid=5379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:15.248000 audit[5379]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffde7baa150 a2=3 a3=0 items=0 ppid=1 pid=5379 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:15.248000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:15.262075 kernel: audit: type=1327 audit(1752533295.248:1544): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:15.262119 kernel: audit: type=1105 audit(1752533295.258:1545): pid=5379 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.258000 audit[5379]: USER_START pid=5379 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.266166 kernel: audit: type=1103 audit(1752533295.259:1546): pid=5381 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.259000 audit[5381]: CRED_ACQ pid=5381 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.382787 sshd[5379]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:15.383000 audit[5379]: USER_END pid=5379 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.387213 systemd[1]: sshd@16-10.0.0.3:22-10.0.0.1:52882.service: Deactivated successfully. Jul 14 22:48:15.387822 systemd[1]: session-17.scope: Deactivated successfully. Jul 14 22:48:15.383000 audit[5379]: CRED_DISP pid=5379 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.388739 systemd-logind[1194]: Session 17 logged out. Waiting for processes to exit. Jul 14 22:48:15.389504 systemd[1]: Started sshd@17-10.0.0.3:22-10.0.0.1:52898.service. Jul 14 22:48:15.390316 systemd-logind[1194]: Removed session 17. Jul 14 22:48:15.391198 kernel: audit: type=1106 audit(1752533295.383:1547): pid=5379 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.391252 kernel: audit: type=1104 audit(1752533295.383:1548): pid=5379 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.386000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-10.0.0.3:22-10.0.0.1:52882 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:15.389000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.3:22-10.0.0.1:52898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:15.418000 audit[5392]: USER_ACCT pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.419680 sshd[5392]: Accepted publickey for core from 10.0.0.1 port 52898 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:15.419000 audit[5392]: CRED_ACQ pid=5392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.419000 audit[5392]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcdcb46ec0 a2=3 a3=0 items=0 ppid=1 pid=5392 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:15.419000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:15.420624 sshd[5392]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:15.423568 systemd-logind[1194]: New session 18 of user core. Jul 14 22:48:15.424270 systemd[1]: Started session-18.scope. Jul 14 22:48:15.426000 audit[5392]: USER_START pid=5392 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.427000 audit[5394]: CRED_ACQ pid=5394 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.678657 sshd[5392]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:15.679000 audit[5392]: USER_END pid=5392 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.679000 audit[5392]: CRED_DISP pid=5392 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.682000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.3:22-10.0.0.1:52900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:15.682000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-10.0.0.3:22-10.0.0.1:52898 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:15.682612 systemd[1]: Started sshd@18-10.0.0.3:22-10.0.0.1:52900.service. Jul 14 22:48:15.683156 systemd[1]: sshd@17-10.0.0.3:22-10.0.0.1:52898.service: Deactivated successfully. Jul 14 22:48:15.684518 systemd[1]: session-18.scope: Deactivated successfully. Jul 14 22:48:15.685297 systemd-logind[1194]: Session 18 logged out. Waiting for processes to exit. Jul 14 22:48:15.686263 systemd-logind[1194]: Removed session 18. Jul 14 22:48:15.713000 audit[5403]: USER_ACCT pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.714636 sshd[5403]: Accepted publickey for core from 10.0.0.1 port 52900 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:15.714000 audit[5403]: CRED_ACQ pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.714000 audit[5403]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffca246c60 a2=3 a3=0 items=0 ppid=1 pid=5403 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:15.714000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:15.715549 sshd[5403]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:15.718609 systemd-logind[1194]: New session 19 of user core. Jul 14 22:48:15.719620 systemd[1]: Started session-19.scope. Jul 14 22:48:15.723000 audit[5403]: USER_START pid=5403 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:15.724000 audit[5406]: CRED_ACQ pid=5406 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.246000 audit[5418]: NETFILTER_CFG table=filter:131 family=2 entries=22 op=nft_register_rule pid=5418 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:16.246000 audit[5418]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffe915e0270 a2=0 a3=7ffe915e025c items=0 ppid=2059 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:16.246000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:16.251000 audit[5418]: NETFILTER_CFG table=nat:132 family=2 entries=24 op=nft_register_rule pid=5418 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:16.251000 audit[5418]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffe915e0270 a2=0 a3=0 items=0 ppid=2059 pid=5418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:16.251000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:16.254908 sshd[5403]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:16.255000 audit[5403]: USER_END pid=5403 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.256000 audit[5403]: CRED_DISP pid=5403 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.258420 systemd[1]: Started sshd@19-10.0.0.3:22-10.0.0.1:52906.service. Jul 14 22:48:16.258000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.3:22-10.0.0.1:52906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:16.258860 systemd[1]: sshd@18-10.0.0.3:22-10.0.0.1:52900.service: Deactivated successfully. Jul 14 22:48:16.258000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-10.0.0.3:22-10.0.0.1:52900 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:16.259365 systemd[1]: session-19.scope: Deactivated successfully. Jul 14 22:48:16.260646 systemd-logind[1194]: Session 19 logged out. Waiting for processes to exit. Jul 14 22:48:16.261633 systemd-logind[1194]: Removed session 19. Jul 14 22:48:16.272000 audit[5424]: NETFILTER_CFG table=filter:133 family=2 entries=34 op=nft_register_rule pid=5424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:16.272000 audit[5424]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffef26fb580 a2=0 a3=7ffef26fb56c items=0 ppid=2059 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:16.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:16.281000 audit[5424]: NETFILTER_CFG table=nat:134 family=2 entries=24 op=nft_register_rule pid=5424 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:16.281000 audit[5424]: SYSCALL arch=c000003e syscall=46 success=yes exit=7308 a0=3 a1=7ffef26fb580 a2=0 a3=0 items=0 ppid=2059 pid=5424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:16.281000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:16.291000 audit[5420]: USER_ACCT pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.291897 sshd[5420]: Accepted publickey for core from 10.0.0.1 port 52906 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:16.292000 audit[5420]: CRED_ACQ pid=5420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.292000 audit[5420]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe7c85f1c0 a2=3 a3=0 items=0 ppid=1 pid=5420 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:16.292000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:16.292873 sshd[5420]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:16.295945 systemd-logind[1194]: New session 20 of user core. Jul 14 22:48:16.296694 systemd[1]: Started session-20.scope. Jul 14 22:48:16.300000 audit[5420]: USER_START pid=5420 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.301000 audit[5425]: CRED_ACQ pid=5425 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.544788 sshd[5420]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:16.545000 audit[5420]: USER_END pid=5420 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.545000 audit[5420]: CRED_DISP pid=5420 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.547609 systemd[1]: sshd@19-10.0.0.3:22-10.0.0.1:52906.service: Deactivated successfully. Jul 14 22:48:16.547000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-10.0.0.3:22-10.0.0.1:52906 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:16.548339 systemd[1]: session-20.scope: Deactivated successfully. Jul 14 22:48:16.548978 systemd-logind[1194]: Session 20 logged out. Waiting for processes to exit. Jul 14 22:48:16.550001 systemd[1]: Started sshd@20-10.0.0.3:22-10.0.0.1:52908.service. Jul 14 22:48:16.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.3:22-10.0.0.1:52908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:16.551025 systemd-logind[1194]: Removed session 20. Jul 14 22:48:16.580000 audit[5435]: USER_ACCT pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.580853 sshd[5435]: Accepted publickey for core from 10.0.0.1 port 52908 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:16.580000 audit[5435]: CRED_ACQ pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.580000 audit[5435]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe6a98340 a2=3 a3=0 items=0 ppid=1 pid=5435 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:16.580000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:16.581790 sshd[5435]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:16.584588 systemd-logind[1194]: New session 21 of user core. Jul 14 22:48:16.585455 systemd[1]: Started session-21.scope. Jul 14 22:48:16.588000 audit[5435]: USER_START pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.589000 audit[5437]: CRED_ACQ pid=5437 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.698831 sshd[5435]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:16.699000 audit[5435]: USER_END pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.699000 audit[5435]: CRED_DISP pid=5435 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:16.700866 systemd[1]: sshd@20-10.0.0.3:22-10.0.0.1:52908.service: Deactivated successfully. Jul 14 22:48:16.700000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-10.0.0.3:22-10.0.0.1:52908 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:16.701588 systemd[1]: session-21.scope: Deactivated successfully. Jul 14 22:48:16.702148 systemd-logind[1194]: Session 21 logged out. Waiting for processes to exit. Jul 14 22:48:16.702993 systemd-logind[1194]: Removed session 21. Jul 14 22:48:21.704180 systemd[1]: Started sshd@21-10.0.0.3:22-10.0.0.1:42522.service. Jul 14 22:48:21.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.3:22-10.0.0.1:42522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:21.705363 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 14 22:48:21.705427 kernel: audit: type=1130 audit(1752533301.703:1590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.3:22-10.0.0.1:42522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:21.733570 sshd[5452]: Accepted publickey for core from 10.0.0.1 port 42522 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:21.732000 audit[5452]: USER_ACCT pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.736319 sshd[5452]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:21.735000 audit[5452]: CRED_ACQ pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.740830 kernel: audit: type=1101 audit(1752533301.732:1591): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.740893 kernel: audit: type=1103 audit(1752533301.735:1592): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.740831 systemd[1]: Started session-22.scope. Jul 14 22:48:21.741738 systemd-logind[1194]: New session 22 of user core. Jul 14 22:48:21.743183 kernel: audit: type=1006 audit(1752533301.735:1593): pid=5452 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 14 22:48:21.735000 audit[5452]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff977f3e70 a2=3 a3=0 items=0 ppid=1 pid=5452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:21.747145 kernel: audit: type=1300 audit(1752533301.735:1593): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff977f3e70 a2=3 a3=0 items=0 ppid=1 pid=5452 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:21.735000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:21.749189 kernel: audit: type=1327 audit(1752533301.735:1593): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:21.746000 audit[5452]: USER_START pid=5452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.753241 kernel: audit: type=1105 audit(1752533301.746:1594): pid=5452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.753457 kernel: audit: type=1103 audit(1752533301.747:1595): pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.747000 audit[5454]: CRED_ACQ pid=5454 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.886508 sshd[5452]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:21.886000 audit[5452]: USER_END pid=5452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.888662 systemd[1]: sshd@21-10.0.0.3:22-10.0.0.1:42522.service: Deactivated successfully. Jul 14 22:48:21.889480 systemd[1]: session-22.scope: Deactivated successfully. Jul 14 22:48:21.890108 systemd-logind[1194]: Session 22 logged out. Waiting for processes to exit. Jul 14 22:48:21.890999 systemd-logind[1194]: Removed session 22. Jul 14 22:48:21.887000 audit[5452]: CRED_DISP pid=5452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.896426 kernel: audit: type=1106 audit(1752533301.886:1596): pid=5452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.896559 kernel: audit: type=1104 audit(1752533301.887:1597): pid=5452 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:21.888000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-10.0.0.3:22-10.0.0.1:42522 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:22.102000 audit[5465]: NETFILTER_CFG table=filter:135 family=2 entries=22 op=nft_register_rule pid=5465 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:22.102000 audit[5465]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffb2f28c20 a2=0 a3=7fffb2f28c0c items=0 ppid=2059 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:22.102000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:22.109000 audit[5465]: NETFILTER_CFG table=nat:136 family=2 entries=108 op=nft_register_chain pid=5465 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:22.109000 audit[5465]: SYSCALL arch=c000003e syscall=46 success=yes exit=50220 a0=3 a1=7fffb2f28c20 a2=0 a3=7fffb2f28c0c items=0 ppid=2059 pid=5465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:22.109000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:22.376569 systemd[1]: run-containerd-runc-k8s.io-40ce216dce8e75455393c97fca87210ddb44a51b29f7a39f506b63af8466fc46-runc.ZVn6Az.mount: Deactivated successfully. Jul 14 22:48:26.028688 kubelet[1950]: E0714 22:48:26.028636 1950 dns.go:153] "Nameserver limits exceeded" err="Nameserver limits were exceeded, some nameservers have been omitted, the applied nameserver line is: 1.1.1.1 1.0.0.1 8.8.8.8" Jul 14 22:48:26.890693 systemd[1]: Started sshd@22-10.0.0.3:22-10.0.0.1:42538.service. Jul 14 22:48:26.889000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.3:22-10.0.0.1:42538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:26.892072 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:48:26.892130 kernel: audit: type=1130 audit(1752533306.889:1601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.3:22-10.0.0.1:42538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:26.922000 audit[5494]: USER_ACCT pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.923000 audit[5494]: CRED_ACQ pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.925679 sshd[5494]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:26.930075 sshd[5494]: Accepted publickey for core from 10.0.0.1 port 42538 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:26.931297 systemd-logind[1194]: New session 23 of user core. Jul 14 22:48:26.932275 systemd[1]: Started session-23.scope. Jul 14 22:48:26.932584 kernel: audit: type=1101 audit(1752533306.922:1602): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.932742 kernel: audit: type=1103 audit(1752533306.923:1603): pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.932773 kernel: audit: type=1006 audit(1752533306.923:1604): pid=5494 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 14 22:48:26.923000 audit[5494]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd5716d20 a2=3 a3=0 items=0 ppid=1 pid=5494 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:26.939730 kernel: audit: type=1300 audit(1752533306.923:1604): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdd5716d20 a2=3 a3=0 items=0 ppid=1 pid=5494 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:26.939777 kernel: audit: type=1327 audit(1752533306.923:1604): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:26.923000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:26.934000 audit[5494]: USER_START pid=5494 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.945129 kernel: audit: type=1105 audit(1752533306.934:1605): pid=5494 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.945169 kernel: audit: type=1103 audit(1752533306.935:1606): pid=5496 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:26.935000 audit[5496]: CRED_ACQ pid=5496 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:27.230633 sshd[5494]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:27.230000 audit[5494]: USER_END pid=5494 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:27.233012 systemd[1]: sshd@22-10.0.0.3:22-10.0.0.1:42538.service: Deactivated successfully. Jul 14 22:48:27.233683 systemd[1]: session-23.scope: Deactivated successfully. Jul 14 22:48:27.234407 systemd-logind[1194]: Session 23 logged out. Waiting for processes to exit. Jul 14 22:48:27.230000 audit[5494]: CRED_DISP pid=5494 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:27.235221 systemd-logind[1194]: Removed session 23. Jul 14 22:48:27.239436 kernel: audit: type=1106 audit(1752533307.230:1607): pid=5494 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:27.239501 kernel: audit: type=1104 audit(1752533307.230:1608): pid=5494 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:27.230000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-10.0.0.3:22-10.0.0.1:42538 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:31.462000 audit[5549]: NETFILTER_CFG table=filter:137 family=2 entries=9 op=nft_register_rule pid=5549 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:31.462000 audit[5549]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd619bb080 a2=0 a3=7ffd619bb06c items=0 ppid=2059 pid=5549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:31.462000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:31.469000 audit[5549]: NETFILTER_CFG table=nat:138 family=2 entries=55 op=nft_register_chain pid=5549 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 22:48:31.469000 audit[5549]: SYSCALL arch=c000003e syscall=46 success=yes exit=20100 a0=3 a1=7ffd619bb080 a2=0 a3=7ffd619bb06c items=0 ppid=2059 pid=5549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:31.469000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 22:48:32.235348 systemd[1]: Started sshd@23-10.0.0.3:22-10.0.0.1:35274.service. Jul 14 22:48:32.233000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.3:22-10.0.0.1:35274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:32.236323 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 22:48:32.236372 kernel: audit: type=1130 audit(1752533312.233:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.3:22-10.0.0.1:35274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:32.263000 audit[5551]: USER_ACCT pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.265444 sshd[5551]: Accepted publickey for core from 10.0.0.1 port 35274 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:32.266926 sshd[5551]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:32.265000 audit[5551]: CRED_ACQ pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.270029 systemd-logind[1194]: New session 24 of user core. Jul 14 22:48:32.271017 systemd[1]: Started session-24.scope. Jul 14 22:48:32.272572 kernel: audit: type=1101 audit(1752533312.263:1613): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.272631 kernel: audit: type=1103 audit(1752533312.265:1614): pid=5551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.272661 kernel: audit: type=1006 audit(1752533312.265:1615): pid=5551 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 14 22:48:32.265000 audit[5551]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72d9ccb0 a2=3 a3=0 items=0 ppid=1 pid=5551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:32.278667 kernel: audit: type=1300 audit(1752533312.265:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72d9ccb0 a2=3 a3=0 items=0 ppid=1 pid=5551 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:32.278712 kernel: audit: type=1327 audit(1752533312.265:1615): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:32.265000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:32.279927 kernel: audit: type=1105 audit(1752533312.273:1616): pid=5551 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.273000 audit[5551]: USER_START pid=5551 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.283905 kernel: audit: type=1103 audit(1752533312.274:1617): pid=5553 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.274000 audit[5553]: CRED_ACQ pid=5553 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.414897 sshd[5551]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:32.414000 audit[5551]: USER_END pid=5551 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.416914 systemd[1]: sshd@23-10.0.0.3:22-10.0.0.1:35274.service: Deactivated successfully. Jul 14 22:48:32.417606 systemd[1]: session-24.scope: Deactivated successfully. Jul 14 22:48:32.418140 systemd-logind[1194]: Session 24 logged out. Waiting for processes to exit. Jul 14 22:48:32.418726 systemd-logind[1194]: Removed session 24. Jul 14 22:48:32.414000 audit[5551]: CRED_DISP pid=5551 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.423283 kernel: audit: type=1106 audit(1752533312.414:1618): pid=5551 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.423337 kernel: audit: type=1104 audit(1752533312.414:1619): pid=5551 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:32.415000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-10.0.0.3:22-10.0.0.1:35274 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:37.218699 systemd[1]: run-containerd-runc-k8s.io-40ce216dce8e75455393c97fca87210ddb44a51b29f7a39f506b63af8466fc46-runc.2o3ebF.mount: Deactivated successfully. Jul 14 22:48:37.419618 systemd[1]: Started sshd@24-10.0.0.3:22-10.0.0.1:35286.service. Jul 14 22:48:37.425593 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 22:48:37.425643 kernel: audit: type=1130 audit(1752533317.418:1621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.3:22-10.0.0.1:35286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:37.418000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.3:22-10.0.0.1:35286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 22:48:37.452000 audit[5586]: USER_ACCT pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.454682 sshd[5586]: Accepted publickey for core from 10.0.0.1 port 35286 ssh2: RSA SHA256:0Wllya0Hvh47mh3zAId8o2egbAvxaoNJfmOBbI7tv9E Jul 14 22:48:37.456000 audit[5586]: CRED_ACQ pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.458587 kernel: audit: type=1101 audit(1752533317.452:1622): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.458624 kernel: audit: type=1103 audit(1752533317.456:1623): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.458804 sshd[5586]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 22:48:37.462692 systemd-logind[1194]: New session 25 of user core. Jul 14 22:48:37.463659 systemd[1]: Started session-25.scope. Jul 14 22:48:37.464027 kernel: audit: type=1006 audit(1752533317.456:1624): pid=5586 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 14 22:48:37.464073 kernel: audit: type=1300 audit(1752533317.456:1624): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddb3ce1b0 a2=3 a3=0 items=0 ppid=1 pid=5586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:37.456000 audit[5586]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffddb3ce1b0 a2=3 a3=0 items=0 ppid=1 pid=5586 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 22:48:37.456000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:37.469121 kernel: audit: type=1327 audit(1752533317.456:1624): proctitle=737368643A20636F7265205B707269765D Jul 14 22:48:37.469173 kernel: audit: type=1105 audit(1752533317.465:1625): pid=5586 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.465000 audit[5586]: USER_START pid=5586 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.476699 kernel: audit: type=1103 audit(1752533317.466:1626): pid=5588 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.466000 audit[5588]: CRED_ACQ pid=5588 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.660276 sshd[5586]: pam_unix(sshd:session): session closed for user core Jul 14 22:48:37.660000 audit[5586]: USER_END pid=5586 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.662357 systemd[1]: sshd@24-10.0.0.3:22-10.0.0.1:35286.service: Deactivated successfully. Jul 14 22:48:37.663001 systemd[1]: session-25.scope: Deactivated successfully. Jul 14 22:48:37.663422 systemd-logind[1194]: Session 25 logged out. Waiting for processes to exit. Jul 14 22:48:37.664068 systemd-logind[1194]: Removed session 25. Jul 14 22:48:37.660000 audit[5586]: CRED_DISP pid=5586 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.668742 kernel: audit: type=1106 audit(1752533317.660:1627): pid=5586 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.668818 kernel: audit: type=1104 audit(1752533317.660:1628): pid=5586 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=10.0.0.1 addr=10.0.0.1 terminal=ssh res=success' Jul 14 22:48:37.661000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-10.0.0.3:22-10.0.0.1:35286 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'