Jul 14 23:09:19.685629 kernel: Linux version 5.15.187-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Mon Jul 14 20:42:36 -00 2025 Jul 14 23:09:19.685644 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:09:19.685651 kernel: Disabled fast string operations Jul 14 23:09:19.685655 kernel: BIOS-provided physical RAM map: Jul 14 23:09:19.685659 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 14 23:09:19.685662 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 14 23:09:19.685668 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 14 23:09:19.685672 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 14 23:09:19.685676 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 14 23:09:19.685680 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 14 23:09:19.685685 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 14 23:09:19.685689 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 14 23:09:19.685692 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 14 23:09:19.685697 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 14 23:09:19.685703 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 14 23:09:19.685707 kernel: NX (Execute Disable) protection: active Jul 14 23:09:19.685712 kernel: SMBIOS 2.7 present. Jul 14 23:09:19.685716 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 14 23:09:19.685721 kernel: vmware: hypercall mode: 0x00 Jul 14 23:09:19.685725 kernel: Hypervisor detected: VMware Jul 14 23:09:19.685730 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 14 23:09:19.685735 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 14 23:09:19.685739 kernel: vmware: using clock offset of 3344185603 ns Jul 14 23:09:19.685743 kernel: tsc: Detected 3408.000 MHz processor Jul 14 23:09:19.685748 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 14 23:09:19.685753 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 14 23:09:19.685758 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 14 23:09:19.685762 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 14 23:09:19.685767 kernel: total RAM covered: 3072M Jul 14 23:09:19.685772 kernel: Found optimal setting for mtrr clean up Jul 14 23:09:19.685777 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 14 23:09:19.685782 kernel: Using GB pages for direct mapping Jul 14 23:09:19.685787 kernel: ACPI: Early table checksum verification disabled Jul 14 23:09:19.685791 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 14 23:09:19.685796 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 14 23:09:19.685800 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 14 23:09:19.685805 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 14 23:09:19.685809 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 14 23:09:19.685813 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 14 23:09:19.685819 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 14 23:09:19.685826 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 14 23:09:19.685831 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 14 23:09:19.685835 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 14 23:09:19.685840 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 14 23:09:19.685846 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 14 23:09:19.685851 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 14 23:09:19.685856 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 14 23:09:19.685861 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 14 23:09:19.685866 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 14 23:09:19.685871 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 14 23:09:19.685876 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 14 23:09:19.685881 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 14 23:09:19.685886 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 14 23:09:19.685892 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 14 23:09:19.685896 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 14 23:09:19.685901 kernel: system APIC only can use physical flat Jul 14 23:09:19.685906 kernel: Setting APIC routing to physical flat. Jul 14 23:09:19.685911 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 14 23:09:19.685916 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 14 23:09:19.685921 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 14 23:09:19.685926 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 14 23:09:19.685931 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 14 23:09:19.685935 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 14 23:09:19.685941 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 14 23:09:19.685946 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 14 23:09:19.685951 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 14 23:09:19.685955 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 14 23:09:19.685960 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 14 23:09:19.685965 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 14 23:09:19.685970 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 14 23:09:19.685975 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 14 23:09:19.685979 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 14 23:09:19.685985 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 14 23:09:19.685990 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 14 23:09:19.685995 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 14 23:09:19.686002 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 14 23:09:19.686009 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 14 23:09:19.686016 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 14 23:09:19.686023 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 14 23:09:19.686029 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 14 23:09:19.686037 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 14 23:09:19.686044 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 14 23:09:19.686053 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 14 23:09:19.686061 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 14 23:09:19.686068 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 14 23:09:19.686076 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 14 23:09:19.686082 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 14 23:09:19.686089 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 14 23:09:19.686095 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 14 23:09:19.686102 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 14 23:09:19.686109 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 14 23:09:19.686115 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 14 23:09:19.686121 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 14 23:09:19.686126 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 14 23:09:19.686131 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 14 23:09:19.686136 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 14 23:09:19.686140 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 14 23:09:19.686145 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 14 23:09:19.686151 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 14 23:09:19.686155 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 14 23:09:19.686160 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 14 23:09:19.686165 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 14 23:09:19.686171 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 14 23:09:19.686176 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 14 23:09:19.686181 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 14 23:09:19.686186 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 14 23:09:19.686191 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 14 23:09:19.686196 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 14 23:09:19.686200 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 14 23:09:19.686205 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 14 23:09:19.686210 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 14 23:09:19.686216 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 14 23:09:19.686221 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 14 23:09:19.686226 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 14 23:09:19.686230 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 14 23:09:19.686235 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 14 23:09:19.686240 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 14 23:09:19.686245 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 14 23:09:19.686254 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 14 23:09:19.686260 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 14 23:09:19.686265 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 14 23:09:19.686270 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 14 23:09:19.686276 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 14 23:09:19.686282 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 14 23:09:19.686287 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 14 23:09:19.686292 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 14 23:09:19.686297 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 14 23:09:19.686303 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 14 23:09:19.686308 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 14 23:09:19.686314 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 14 23:09:19.686319 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 14 23:09:19.686324 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 14 23:09:19.686329 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 14 23:09:19.686334 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 14 23:09:19.686339 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 14 23:09:19.686345 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 14 23:09:19.686358 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 14 23:09:19.686364 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 14 23:09:19.686369 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 14 23:09:19.686376 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 14 23:09:19.686382 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 14 23:09:19.686387 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 14 23:09:19.686392 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 14 23:09:19.686397 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 14 23:09:19.686402 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 14 23:09:19.686407 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 14 23:09:19.686413 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 14 23:09:19.686418 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 14 23:09:19.686423 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 14 23:09:19.686429 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 14 23:09:19.686434 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 14 23:09:19.686439 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 14 23:09:19.686444 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 14 23:09:19.686450 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 14 23:09:19.686455 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 14 23:09:19.686460 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 14 23:09:19.686465 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 14 23:09:19.686470 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 14 23:09:19.686476 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 14 23:09:19.686482 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 14 23:09:19.686487 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 14 23:09:19.686492 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 14 23:09:19.686497 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 14 23:09:19.686502 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 14 23:09:19.686507 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 14 23:09:19.686513 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 14 23:09:19.686518 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 14 23:09:19.686523 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 14 23:09:19.686528 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 14 23:09:19.686534 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 14 23:09:19.686539 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 14 23:09:19.686544 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 14 23:09:19.686550 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 14 23:09:19.686555 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 14 23:09:19.686560 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 14 23:09:19.686565 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 14 23:09:19.686570 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 14 23:09:19.686576 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 14 23:09:19.686582 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 14 23:09:19.686587 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 14 23:09:19.686592 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 14 23:09:19.686597 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 14 23:09:19.686602 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 14 23:09:19.686608 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 14 23:09:19.686613 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 14 23:09:19.686618 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 14 23:09:19.686623 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 14 23:09:19.686629 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 14 23:09:19.686635 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 14 23:09:19.686640 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 14 23:09:19.686646 kernel: Zone ranges: Jul 14 23:09:19.686651 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 14 23:09:19.686656 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 14 23:09:19.686662 kernel: Normal empty Jul 14 23:09:19.686667 kernel: Movable zone start for each node Jul 14 23:09:19.686672 kernel: Early memory node ranges Jul 14 23:09:19.686677 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 14 23:09:19.686682 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 14 23:09:19.686689 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 14 23:09:19.686694 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 14 23:09:19.686700 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 14 23:09:19.686705 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 14 23:09:19.686710 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 14 23:09:19.686715 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 14 23:09:19.686721 kernel: system APIC only can use physical flat Jul 14 23:09:19.686727 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 14 23:09:19.686732 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 14 23:09:19.686738 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 14 23:09:19.686743 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 14 23:09:19.686748 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 14 23:09:19.686754 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 14 23:09:19.686759 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 14 23:09:19.686764 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 14 23:09:19.686769 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 14 23:09:19.686775 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 14 23:09:19.686780 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 14 23:09:19.686786 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 14 23:09:19.686791 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 14 23:09:19.686797 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 14 23:09:19.686802 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 14 23:09:19.686807 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 14 23:09:19.686812 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 14 23:09:19.686818 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 14 23:09:19.686823 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 14 23:09:19.686828 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 14 23:09:19.686833 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 14 23:09:19.686839 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 14 23:09:19.686844 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 14 23:09:19.686850 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 14 23:09:19.686855 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 14 23:09:19.686865 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 14 23:09:19.686870 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 14 23:09:19.686876 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 14 23:09:19.686881 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 14 23:09:19.686886 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 14 23:09:19.686893 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 14 23:09:19.686898 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 14 23:09:19.686903 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 14 23:09:19.686909 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 14 23:09:19.686914 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 14 23:09:19.686920 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 14 23:09:19.686925 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 14 23:09:19.686930 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 14 23:09:19.686935 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 14 23:09:19.686941 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 14 23:09:19.686947 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 14 23:09:19.686952 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 14 23:09:19.686957 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 14 23:09:19.686963 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 14 23:09:19.686968 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 14 23:09:19.686973 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 14 23:09:19.686978 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 14 23:09:19.686983 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 14 23:09:19.686989 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 14 23:09:19.686995 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 14 23:09:19.687001 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 14 23:09:19.687006 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 14 23:09:19.687011 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 14 23:09:19.687016 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 14 23:09:19.687021 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 14 23:09:19.687027 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 14 23:09:19.687032 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 14 23:09:19.687037 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 14 23:09:19.687043 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 14 23:09:19.687049 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 14 23:09:19.687054 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 14 23:09:19.687059 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 14 23:09:19.687064 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 14 23:09:19.687069 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 14 23:09:19.687075 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 14 23:09:19.687080 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 14 23:09:19.687085 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 14 23:09:19.687090 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 14 23:09:19.687096 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 14 23:09:19.687102 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 14 23:09:19.687107 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 14 23:09:19.687112 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 14 23:09:19.687117 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 14 23:09:19.687123 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 14 23:09:19.687128 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 14 23:09:19.687133 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 14 23:09:19.687138 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 14 23:09:19.687145 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 14 23:09:19.687150 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 14 23:09:19.687155 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 14 23:09:19.687160 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 14 23:09:19.687165 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 14 23:09:19.687171 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 14 23:09:19.687176 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 14 23:09:19.687182 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 14 23:09:19.687187 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 14 23:09:19.687192 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 14 23:09:19.687198 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 14 23:09:19.687203 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 14 23:09:19.687209 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 14 23:09:19.687214 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 14 23:09:19.687219 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 14 23:09:19.687224 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 14 23:09:19.687229 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 14 23:09:19.687234 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 14 23:09:19.687240 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 14 23:09:19.687246 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 14 23:09:19.687251 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 14 23:09:19.687256 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 14 23:09:19.687262 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 14 23:09:19.687267 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 14 23:09:19.687272 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 14 23:09:19.687277 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 14 23:09:19.687283 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 14 23:09:19.687288 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 14 23:09:19.687293 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 14 23:09:19.687299 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 14 23:09:19.687305 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 14 23:09:19.687310 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 14 23:09:19.687315 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 14 23:09:19.687320 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 14 23:09:19.687326 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 14 23:09:19.687331 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 14 23:09:19.687336 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 14 23:09:19.687341 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 14 23:09:19.687347 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 14 23:09:19.687387 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 14 23:09:19.687394 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 14 23:09:19.687399 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 14 23:09:19.687405 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 14 23:09:19.687410 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 14 23:09:19.687415 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 14 23:09:19.687420 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 14 23:09:19.687425 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 14 23:09:19.687432 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 14 23:09:19.687438 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 14 23:09:19.687443 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 14 23:09:19.687449 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 14 23:09:19.687454 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 14 23:09:19.687459 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 14 23:09:19.687464 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 14 23:09:19.687470 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 14 23:09:19.687475 kernel: TSC deadline timer available Jul 14 23:09:19.687480 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 14 23:09:19.687486 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 14 23:09:19.687492 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 14 23:09:19.687497 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 14 23:09:19.687503 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 14 23:09:19.687508 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 14 23:09:19.687514 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 14 23:09:19.687519 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 14 23:09:19.687524 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 14 23:09:19.687530 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 14 23:09:19.687535 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 14 23:09:19.687541 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 14 23:09:19.687546 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 14 23:09:19.687551 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 14 23:09:19.687563 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 14 23:09:19.687570 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 14 23:09:19.687576 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 14 23:09:19.687581 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 14 23:09:19.687588 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 14 23:09:19.687593 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 14 23:09:19.687599 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 14 23:09:19.687604 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 14 23:09:19.687610 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 14 23:09:19.687615 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 14 23:09:19.687621 kernel: Policy zone: DMA32 Jul 14 23:09:19.687627 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:09:19.687635 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 14 23:09:19.687640 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 14 23:09:19.687646 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 14 23:09:19.687652 kernel: printk: log_buf_len min size: 262144 bytes Jul 14 23:09:19.687657 kernel: printk: log_buf_len: 1048576 bytes Jul 14 23:09:19.687663 kernel: printk: early log buf free: 239728(91%) Jul 14 23:09:19.687668 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 14 23:09:19.687674 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 14 23:09:19.687680 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 14 23:09:19.687687 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 155976K reserved, 0K cma-reserved) Jul 14 23:09:19.687693 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 14 23:09:19.687698 kernel: ftrace: allocating 34607 entries in 136 pages Jul 14 23:09:19.687704 kernel: ftrace: allocated 136 pages with 2 groups Jul 14 23:09:19.687711 kernel: rcu: Hierarchical RCU implementation. Jul 14 23:09:19.687718 kernel: rcu: RCU event tracing is enabled. Jul 14 23:09:19.687724 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 14 23:09:19.687730 kernel: Rude variant of Tasks RCU enabled. Jul 14 23:09:19.687735 kernel: Tracing variant of Tasks RCU enabled. Jul 14 23:09:19.687741 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 14 23:09:19.687747 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 14 23:09:19.687753 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 14 23:09:19.687758 kernel: random: crng init done Jul 14 23:09:19.687764 kernel: Console: colour VGA+ 80x25 Jul 14 23:09:19.687769 kernel: printk: console [tty0] enabled Jul 14 23:09:19.687776 kernel: printk: console [ttyS0] enabled Jul 14 23:09:19.687782 kernel: ACPI: Core revision 20210730 Jul 14 23:09:19.687787 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 14 23:09:19.687793 kernel: APIC: Switch to symmetric I/O mode setup Jul 14 23:09:19.687799 kernel: x2apic enabled Jul 14 23:09:19.687805 kernel: Switched APIC routing to physical x2apic. Jul 14 23:09:19.687810 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 14 23:09:19.687816 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 14 23:09:19.687822 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 14 23:09:19.687828 kernel: Disabled fast string operations Jul 14 23:09:19.687834 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 14 23:09:19.687839 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 14 23:09:19.687845 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 14 23:09:19.687851 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 14 23:09:19.687858 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 14 23:09:19.687863 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 14 23:09:19.687869 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 14 23:09:19.687876 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 14 23:09:19.687881 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 14 23:09:19.687887 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 14 23:09:19.687893 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 14 23:09:19.687899 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 14 23:09:19.687904 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 14 23:09:19.687910 kernel: GDS: Unknown: Dependent on hypervisor status Jul 14 23:09:19.687916 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 14 23:09:19.687922 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 14 23:09:19.687929 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 14 23:09:19.687935 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 14 23:09:19.687940 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 14 23:09:19.687946 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 14 23:09:19.687952 kernel: Freeing SMP alternatives memory: 32K Jul 14 23:09:19.687958 kernel: pid_max: default: 131072 minimum: 1024 Jul 14 23:09:19.687964 kernel: LSM: Security Framework initializing Jul 14 23:09:19.687969 kernel: SELinux: Initializing. Jul 14 23:09:19.687975 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.687982 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.687988 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 14 23:09:19.687994 kernel: Performance Events: Skylake events, core PMU driver. Jul 14 23:09:19.688000 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 14 23:09:19.688006 kernel: core: CPUID marked event: 'instructions' unavailable Jul 14 23:09:19.688011 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 14 23:09:19.688016 kernel: core: CPUID marked event: 'cache references' unavailable Jul 14 23:09:19.688022 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 14 23:09:19.688028 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 14 23:09:19.688034 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 14 23:09:19.688040 kernel: ... version: 1 Jul 14 23:09:19.688045 kernel: ... bit width: 48 Jul 14 23:09:19.688051 kernel: ... generic registers: 4 Jul 14 23:09:19.688058 kernel: ... value mask: 0000ffffffffffff Jul 14 23:09:19.688063 kernel: ... max period: 000000007fffffff Jul 14 23:09:19.688069 kernel: ... fixed-purpose events: 0 Jul 14 23:09:19.688075 kernel: ... event mask: 000000000000000f Jul 14 23:09:19.688080 kernel: signal: max sigframe size: 1776 Jul 14 23:09:19.688087 kernel: rcu: Hierarchical SRCU implementation. Jul 14 23:09:19.688093 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 14 23:09:19.688098 kernel: smp: Bringing up secondary CPUs ... Jul 14 23:09:19.688104 kernel: x86: Booting SMP configuration: Jul 14 23:09:19.688110 kernel: .... node #0, CPUs: #1 Jul 14 23:09:19.688115 kernel: Disabled fast string operations Jul 14 23:09:19.688121 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 14 23:09:19.688127 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 14 23:09:19.688132 kernel: smp: Brought up 1 node, 2 CPUs Jul 14 23:09:19.688138 kernel: smpboot: Max logical packages: 128 Jul 14 23:09:19.688145 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 14 23:09:19.688150 kernel: devtmpfs: initialized Jul 14 23:09:19.688156 kernel: x86/mm: Memory block size: 128MB Jul 14 23:09:19.688162 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 14 23:09:19.688168 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 14 23:09:19.688173 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 14 23:09:19.688179 kernel: pinctrl core: initialized pinctrl subsystem Jul 14 23:09:19.688185 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 14 23:09:19.688190 kernel: audit: initializing netlink subsys (disabled) Jul 14 23:09:19.688197 kernel: audit: type=2000 audit(1752534558.090:1): state=initialized audit_enabled=0 res=1 Jul 14 23:09:19.688203 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 14 23:09:19.688208 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 14 23:09:19.688214 kernel: cpuidle: using governor menu Jul 14 23:09:19.688220 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 14 23:09:19.688225 kernel: ACPI: bus type PCI registered Jul 14 23:09:19.688231 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 14 23:09:19.688237 kernel: dca service started, version 1.12.1 Jul 14 23:09:19.688242 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 14 23:09:19.688249 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 14 23:09:19.688255 kernel: PCI: Using configuration type 1 for base access Jul 14 23:09:19.688261 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 14 23:09:19.688266 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 14 23:09:19.688272 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 14 23:09:19.688278 kernel: ACPI: Added _OSI(Module Device) Jul 14 23:09:19.688283 kernel: ACPI: Added _OSI(Processor Device) Jul 14 23:09:19.688289 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 14 23:09:19.688294 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 14 23:09:19.688301 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 14 23:09:19.688307 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 14 23:09:19.688312 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 14 23:09:19.688318 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 14 23:09:19.688324 kernel: ACPI: Interpreter enabled Jul 14 23:09:19.688330 kernel: ACPI: PM: (supports S0 S1 S5) Jul 14 23:09:19.688336 kernel: ACPI: Using IOAPIC for interrupt routing Jul 14 23:09:19.688341 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 14 23:09:19.688347 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 14 23:09:19.696416 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 14 23:09:19.696510 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 14 23:09:19.696566 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 14 23:09:19.696614 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 14 23:09:19.696623 kernel: PCI host bridge to bus 0000:00 Jul 14 23:09:19.696675 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 14 23:09:19.696723 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 14 23:09:19.696766 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 14 23:09:19.696808 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 14 23:09:19.696850 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 14 23:09:19.696892 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 14 23:09:19.696948 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 14 23:09:19.697002 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 14 23:09:19.697058 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 14 23:09:19.697111 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 14 23:09:19.697158 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 14 23:09:19.697209 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 14 23:09:19.697256 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 14 23:09:19.697303 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 14 23:09:19.697360 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 14 23:09:19.697414 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 14 23:09:19.697462 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 14 23:09:19.697510 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 14 23:09:19.697568 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 14 23:09:19.697617 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 14 23:09:19.697681 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 14 23:09:19.697736 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 14 23:09:19.697783 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 14 23:09:19.697830 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 14 23:09:19.697883 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 14 23:09:19.697931 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 14 23:09:19.697978 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 14 23:09:19.698030 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 14 23:09:19.698086 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698134 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698187 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698238 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698291 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698340 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698404 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698453 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698505 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698554 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698608 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698656 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698710 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698758 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698808 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698857 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.698909 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.698958 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.699015 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.699064 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.699116 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.699165 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.699217 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.699268 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.699322 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.708466 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.708545 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.708599 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.708659 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.708711 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.708768 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.708816 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.708869 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.708918 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.708971 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709020 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709076 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709124 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709177 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709225 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709277 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709326 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709401 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709452 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709507 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709555 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709607 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709655 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709715 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709765 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709816 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709871 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.709923 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.709970 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.710022 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.710073 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.710125 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.710173 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.710224 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.710273 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.710327 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.710387 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.710440 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 14 23:09:19.710489 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.710543 kernel: pci_bus 0000:01: extended config space not accessible Jul 14 23:09:19.710595 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 14 23:09:19.710647 kernel: pci_bus 0000:02: extended config space not accessible Jul 14 23:09:19.710659 kernel: acpiphp: Slot [32] registered Jul 14 23:09:19.710665 kernel: acpiphp: Slot [33] registered Jul 14 23:09:19.710671 kernel: acpiphp: Slot [34] registered Jul 14 23:09:19.710676 kernel: acpiphp: Slot [35] registered Jul 14 23:09:19.710682 kernel: acpiphp: Slot [36] registered Jul 14 23:09:19.710688 kernel: acpiphp: Slot [37] registered Jul 14 23:09:19.710693 kernel: acpiphp: Slot [38] registered Jul 14 23:09:19.710699 kernel: acpiphp: Slot [39] registered Jul 14 23:09:19.710705 kernel: acpiphp: Slot [40] registered Jul 14 23:09:19.710711 kernel: acpiphp: Slot [41] registered Jul 14 23:09:19.710717 kernel: acpiphp: Slot [42] registered Jul 14 23:09:19.710723 kernel: acpiphp: Slot [43] registered Jul 14 23:09:19.710729 kernel: acpiphp: Slot [44] registered Jul 14 23:09:19.710735 kernel: acpiphp: Slot [45] registered Jul 14 23:09:19.710741 kernel: acpiphp: Slot [46] registered Jul 14 23:09:19.710747 kernel: acpiphp: Slot [47] registered Jul 14 23:09:19.710752 kernel: acpiphp: Slot [48] registered Jul 14 23:09:19.710758 kernel: acpiphp: Slot [49] registered Jul 14 23:09:19.710764 kernel: acpiphp: Slot [50] registered Jul 14 23:09:19.710771 kernel: acpiphp: Slot [51] registered Jul 14 23:09:19.710776 kernel: acpiphp: Slot [52] registered Jul 14 23:09:19.710782 kernel: acpiphp: Slot [53] registered Jul 14 23:09:19.710788 kernel: acpiphp: Slot [54] registered Jul 14 23:09:19.710794 kernel: acpiphp: Slot [55] registered Jul 14 23:09:19.710799 kernel: acpiphp: Slot [56] registered Jul 14 23:09:19.710805 kernel: acpiphp: Slot [57] registered Jul 14 23:09:19.710811 kernel: acpiphp: Slot [58] registered Jul 14 23:09:19.710817 kernel: acpiphp: Slot [59] registered Jul 14 23:09:19.710824 kernel: acpiphp: Slot [60] registered Jul 14 23:09:19.710829 kernel: acpiphp: Slot [61] registered Jul 14 23:09:19.710835 kernel: acpiphp: Slot [62] registered Jul 14 23:09:19.710841 kernel: acpiphp: Slot [63] registered Jul 14 23:09:19.710892 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 14 23:09:19.710940 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 14 23:09:19.710987 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 14 23:09:19.711035 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:09:19.711082 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 14 23:09:19.711131 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 14 23:09:19.711178 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 14 23:09:19.711226 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 14 23:09:19.711273 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 14 23:09:19.711327 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 14 23:09:19.711393 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 14 23:09:19.711443 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 14 23:09:19.711495 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 14 23:09:19.711544 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 14 23:09:19.711593 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 14 23:09:19.711642 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 14 23:09:19.711689 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 14 23:09:19.711736 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 14 23:09:19.711785 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 14 23:09:19.711835 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 14 23:09:19.711883 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 14 23:09:19.711929 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:09:19.711979 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 14 23:09:19.712026 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 14 23:09:19.712075 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 14 23:09:19.712122 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:09:19.712173 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 14 23:09:19.712223 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 14 23:09:19.712271 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:09:19.712320 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 14 23:09:19.712377 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 14 23:09:19.712426 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:09:19.712478 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 14 23:09:19.712527 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 14 23:09:19.712575 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:09:19.712625 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 14 23:09:19.712672 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 14 23:09:19.712723 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:09:19.712773 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 14 23:09:19.712823 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 14 23:09:19.712875 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:09:19.712931 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 14 23:09:19.712983 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 14 23:09:19.713033 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 14 23:09:19.713082 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 14 23:09:19.713131 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 14 23:09:19.713179 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 14 23:09:19.713231 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 14 23:09:19.713280 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 14 23:09:19.713329 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 14 23:09:19.717443 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 14 23:09:19.717512 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 14 23:09:19.717563 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 14 23:09:19.717615 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 14 23:09:19.717667 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 14 23:09:19.717715 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 14 23:09:19.717762 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:09:19.717814 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 14 23:09:19.717862 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 14 23:09:19.717910 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 14 23:09:19.717958 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:09:19.718008 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 14 23:09:19.718058 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 14 23:09:19.718105 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:09:19.718154 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 14 23:09:19.718201 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 14 23:09:19.718248 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:09:19.718299 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 14 23:09:19.718348 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 14 23:09:19.718414 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:09:19.718467 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 14 23:09:19.718514 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 14 23:09:19.718563 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:09:19.718613 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 14 23:09:19.718661 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 14 23:09:19.718709 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:09:19.718759 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 14 23:09:19.718807 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 14 23:09:19.718857 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 14 23:09:19.718905 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:09:19.718954 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 14 23:09:19.719002 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 14 23:09:19.719049 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 14 23:09:19.719096 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:09:19.719146 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 14 23:09:19.719195 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 14 23:09:19.719243 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 14 23:09:19.719290 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:09:19.719341 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 14 23:09:19.719398 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 14 23:09:19.719446 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:09:19.719496 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 14 23:09:19.719544 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 14 23:09:19.719594 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:09:19.719645 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 14 23:09:19.719691 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 14 23:09:19.719739 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:09:19.719788 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 14 23:09:19.719835 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 14 23:09:19.719888 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:09:19.719942 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 14 23:09:19.719993 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 14 23:09:19.720039 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:09:19.720087 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 14 23:09:19.720134 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 14 23:09:19.720181 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 14 23:09:19.720229 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:09:19.720278 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 14 23:09:19.720326 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 14 23:09:19.720383 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 14 23:09:19.720430 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:09:19.720479 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 14 23:09:19.720526 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 14 23:09:19.720574 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:09:19.720623 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 14 23:09:19.720672 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 14 23:09:19.720719 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:09:19.720771 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 14 23:09:19.720819 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 14 23:09:19.720865 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:09:19.720915 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 14 23:09:19.720962 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 14 23:09:19.721009 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:09:19.721058 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 14 23:09:19.721106 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 14 23:09:19.721156 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:09:19.721205 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 14 23:09:19.721253 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 14 23:09:19.721300 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:09:19.721309 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 14 23:09:19.721315 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 14 23:09:19.721321 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 14 23:09:19.721327 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 14 23:09:19.721334 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 14 23:09:19.721340 kernel: iommu: Default domain type: Translated Jul 14 23:09:19.721346 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 14 23:09:19.721409 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 14 23:09:19.721458 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 14 23:09:19.721505 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 14 23:09:19.721514 kernel: vgaarb: loaded Jul 14 23:09:19.721520 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 14 23:09:19.721526 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 14 23:09:19.721534 kernel: PTP clock support registered Jul 14 23:09:19.721540 kernel: PCI: Using ACPI for IRQ routing Jul 14 23:09:19.721546 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 14 23:09:19.721551 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 14 23:09:19.721557 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 14 23:09:19.721563 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 14 23:09:19.721569 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 14 23:09:19.721575 kernel: clocksource: Switched to clocksource tsc-early Jul 14 23:09:19.721580 kernel: VFS: Disk quotas dquot_6.6.0 Jul 14 23:09:19.721587 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 14 23:09:19.721593 kernel: pnp: PnP ACPI init Jul 14 23:09:19.721646 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 14 23:09:19.721692 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 14 23:09:19.721736 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 14 23:09:19.721787 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 14 23:09:19.721834 kernel: pnp 00:06: [dma 2] Jul 14 23:09:19.721885 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 14 23:09:19.721931 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 14 23:09:19.721973 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 14 23:09:19.721981 kernel: pnp: PnP ACPI: found 8 devices Jul 14 23:09:19.721987 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 14 23:09:19.721993 kernel: NET: Registered PF_INET protocol family Jul 14 23:09:19.721999 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 14 23:09:19.722005 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 14 23:09:19.722012 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 14 23:09:19.722018 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 14 23:09:19.722024 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 14 23:09:19.722030 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 14 23:09:19.722036 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.722042 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 14 23:09:19.722048 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 14 23:09:19.722053 kernel: NET: Registered PF_XDP protocol family Jul 14 23:09:19.722104 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 14 23:09:19.722155 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 14 23:09:19.722204 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 14 23:09:19.722253 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 14 23:09:19.722303 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 14 23:09:19.722464 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 14 23:09:19.722523 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 14 23:09:19.722574 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 14 23:09:19.722623 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 14 23:09:19.722672 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 14 23:09:19.722721 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 14 23:09:19.722771 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 14 23:09:19.722822 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 14 23:09:19.722879 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 14 23:09:19.722935 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 14 23:09:19.722985 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 14 23:09:19.723033 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 14 23:09:19.723081 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 14 23:09:19.723132 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 14 23:09:19.723180 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 14 23:09:19.723227 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 14 23:09:19.723276 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 14 23:09:19.723324 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 14 23:09:19.723380 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:09:19.723431 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:09:19.723480 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.723528 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.723577 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.723624 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.723672 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.723719 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.723768 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.723816 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.723871 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.723920 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.723969 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724016 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724065 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724113 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724161 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724211 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724261 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724309 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724365 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724415 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724464 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724512 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724560 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724609 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724658 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724705 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724753 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724801 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724849 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724897 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.724945 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.724995 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725043 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725090 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725138 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725186 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725234 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725282 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725331 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725392 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725441 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725489 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725536 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725586 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725634 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725682 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725729 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725776 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725827 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725875 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.725924 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.725977 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726025 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726073 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726121 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726168 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726215 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726264 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726313 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726475 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726525 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726607 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726703 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726765 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726816 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726867 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.726915 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.726965 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727014 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727061 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727109 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727155 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727203 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727251 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727299 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727346 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727403 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727497 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727559 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727608 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727658 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727705 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727754 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 14 23:09:19.727802 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 14 23:09:19.727851 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 14 23:09:19.727899 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 14 23:09:19.727950 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 14 23:09:19.727997 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 14 23:09:19.728044 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:09:19.728096 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 14 23:09:19.728146 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 14 23:09:19.728194 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 14 23:09:19.728241 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 14 23:09:19.728289 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:09:19.728340 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 14 23:09:19.728487 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 14 23:09:19.728534 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 14 23:09:19.728581 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:09:19.728628 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 14 23:09:19.728675 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 14 23:09:19.729057 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 14 23:09:19.729113 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:09:19.729163 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 14 23:09:19.729214 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 14 23:09:19.729262 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:09:19.729309 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 14 23:09:19.729365 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 14 23:09:19.729414 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:09:19.729465 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 14 23:09:19.729516 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 14 23:09:19.729564 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:09:19.729611 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 14 23:09:19.729659 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 14 23:09:19.729706 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:09:19.729754 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 14 23:09:19.729802 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 14 23:09:19.729849 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:09:19.729907 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 14 23:09:19.729959 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 14 23:09:19.730007 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 14 23:09:19.730054 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 14 23:09:19.730101 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:09:19.730150 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 14 23:09:19.730198 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 14 23:09:19.730245 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 14 23:09:19.730292 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:09:19.730340 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 14 23:09:19.730403 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 14 23:09:19.730455 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 14 23:09:19.730501 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:09:19.730551 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 14 23:09:19.730598 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 14 23:09:19.730646 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:09:19.730694 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 14 23:09:19.730741 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 14 23:09:19.730788 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:09:19.730837 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 14 23:09:19.730887 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 14 23:09:19.730935 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:09:19.730983 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 14 23:09:19.731031 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 14 23:09:19.731078 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:09:19.731126 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 14 23:09:19.731174 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 14 23:09:19.731222 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:09:19.731271 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 14 23:09:19.731320 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 14 23:09:19.731463 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 14 23:09:19.731512 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:09:19.731562 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 14 23:09:19.731610 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 14 23:09:19.731657 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 14 23:09:19.731705 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:09:19.731754 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 14 23:09:19.732046 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 14 23:09:19.732105 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 14 23:09:19.732158 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:09:19.732209 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 14 23:09:19.732257 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 14 23:09:19.732306 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:09:19.732411 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 14 23:09:19.732465 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 14 23:09:19.732512 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:09:19.732560 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 14 23:09:19.732608 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 14 23:09:19.732657 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:09:19.732706 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 14 23:09:19.732753 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 14 23:09:19.732800 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:09:19.732848 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 14 23:09:19.732901 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 14 23:09:19.732949 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:09:19.732997 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 14 23:09:19.733044 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 14 23:09:19.733091 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 14 23:09:19.733142 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:09:19.733191 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 14 23:09:19.733237 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 14 23:09:19.733284 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 14 23:09:19.733331 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:09:19.733393 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 14 23:09:19.733443 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 14 23:09:19.733490 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:09:19.733539 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 14 23:09:19.733590 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 14 23:09:19.733638 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:09:19.733689 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 14 23:09:19.733764 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 14 23:09:19.734104 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:09:19.734161 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 14 23:09:19.734211 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 14 23:09:19.734261 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:09:19.734311 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 14 23:09:19.734489 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 14 23:09:19.734543 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:09:19.734593 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 14 23:09:19.734640 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 14 23:09:19.734970 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:09:19.735026 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 14 23:09:19.735071 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 14 23:09:19.735113 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 14 23:09:19.735155 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 14 23:09:19.735196 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 14 23:09:19.735246 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 14 23:09:19.735291 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 14 23:09:19.735334 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 14 23:09:19.735400 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 14 23:09:19.735447 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 14 23:09:19.735492 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 14 23:09:19.735536 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 14 23:09:19.735583 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 14 23:09:19.735633 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 14 23:09:19.735678 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 14 23:09:19.735947 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 14 23:09:19.736003 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 14 23:09:19.736051 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 14 23:09:19.736096 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 14 23:09:19.736147 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 14 23:09:19.736193 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 14 23:09:19.736237 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 14 23:09:19.736288 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 14 23:09:19.736334 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 14 23:09:19.740595 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 14 23:09:19.740663 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 14 23:09:19.740715 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 14 23:09:19.740761 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 14 23:09:19.740811 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 14 23:09:19.740857 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 14 23:09:19.740906 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 14 23:09:19.740953 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 14 23:09:19.741008 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 14 23:09:19.741054 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 14 23:09:19.741099 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 14 23:09:19.741151 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 14 23:09:19.741196 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 14 23:09:19.741245 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 14 23:09:19.741302 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 14 23:09:19.741349 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 14 23:09:19.741406 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 14 23:09:19.741695 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 14 23:09:19.741797 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 14 23:09:19.741874 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 14 23:09:19.741927 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 14 23:09:19.741978 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 14 23:09:19.742024 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 14 23:09:19.742073 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 14 23:09:19.742118 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 14 23:09:19.742170 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 14 23:09:19.742218 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 14 23:09:19.742266 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 14 23:09:19.742311 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 14 23:09:19.742368 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 14 23:09:19.742419 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 14 23:09:19.742464 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 14 23:09:19.742508 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 14 23:09:19.742559 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 14 23:09:19.742604 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 14 23:09:19.742649 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 14 23:09:19.742698 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 14 23:09:19.742744 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 14 23:09:19.742792 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 14 23:09:19.742866 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 14 23:09:19.743155 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 14 23:09:19.743207 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 14 23:09:19.743258 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 14 23:09:19.743305 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 14 23:09:19.743410 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 14 23:09:19.743460 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 14 23:09:19.743512 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 14 23:09:19.743557 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 14 23:09:19.743602 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 14 23:09:19.743672 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 14 23:09:19.743954 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 14 23:09:19.744009 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 14 23:09:19.744085 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 14 23:09:19.744139 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 14 23:09:19.744192 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 14 23:09:19.744460 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 14 23:09:19.744518 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 14 23:09:19.744564 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 14 23:09:19.744619 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 14 23:09:19.744665 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 14 23:09:19.744715 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 14 23:09:19.744760 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 14 23:09:19.744811 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 14 23:09:19.744856 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 14 23:09:19.744914 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 14 23:09:19.744924 kernel: PCI: CLS 32 bytes, default 64 Jul 14 23:09:19.744930 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 14 23:09:19.744937 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 14 23:09:19.744943 kernel: clocksource: Switched to clocksource tsc Jul 14 23:09:19.744950 kernel: Initialise system trusted keyrings Jul 14 23:09:19.744958 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 14 23:09:19.744968 kernel: Key type asymmetric registered Jul 14 23:09:19.744980 kernel: Asymmetric key parser 'x509' registered Jul 14 23:09:19.744989 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 14 23:09:19.744998 kernel: io scheduler mq-deadline registered Jul 14 23:09:19.745007 kernel: io scheduler kyber registered Jul 14 23:09:19.745013 kernel: io scheduler bfq registered Jul 14 23:09:19.745071 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 14 23:09:19.745123 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.745172 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 14 23:09:19.745221 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.745274 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 14 23:09:19.745323 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.745444 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 14 23:09:19.745494 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.745843 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 14 23:09:19.745905 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.745962 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 14 23:09:19.746013 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746064 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 14 23:09:19.746114 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746166 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 14 23:09:19.746218 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746269 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 14 23:09:19.746318 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746387 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 14 23:09:19.746439 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746489 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 14 23:09:19.746537 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746591 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 14 23:09:19.746760 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746813 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 14 23:09:19.746867 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.746919 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 14 23:09:19.746971 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747021 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 14 23:09:19.747070 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747123 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 14 23:09:19.747171 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747220 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 14 23:09:19.747271 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747321 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 14 23:09:19.747426 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747478 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 14 23:09:19.747527 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747880 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 14 23:09:19.747935 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.747990 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 14 23:09:19.748061 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.748133 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 14 23:09:19.748185 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.748236 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 14 23:09:19.748287 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.748338 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 14 23:09:19.748407 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.748459 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 14 23:09:19.748508 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.748557 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 14 23:09:19.748758 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749032 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 14 23:09:19.749090 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749143 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 14 23:09:19.749193 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749245 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 14 23:09:19.749298 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749347 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 14 23:09:19.749459 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749511 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 14 23:09:19.749865 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749926 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 14 23:09:19.749977 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 14 23:09:19.749986 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 14 23:09:19.749993 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 14 23:09:19.750000 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 14 23:09:19.750006 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 14 23:09:19.750013 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 14 23:09:19.750021 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 14 23:09:19.750072 kernel: rtc_cmos 00:01: registered as rtc0 Jul 14 23:09:19.750118 kernel: rtc_cmos 00:01: setting system clock to 2025-07-14T23:09:19 UTC (1752534559) Jul 14 23:09:19.750161 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 14 23:09:19.750170 kernel: intel_pstate: CPU model not supported Jul 14 23:09:19.750176 kernel: NET: Registered PF_INET6 protocol family Jul 14 23:09:19.750183 kernel: Segment Routing with IPv6 Jul 14 23:09:19.750189 kernel: In-situ OAM (IOAM) with IPv6 Jul 14 23:09:19.750197 kernel: NET: Registered PF_PACKET protocol family Jul 14 23:09:19.750203 kernel: Key type dns_resolver registered Jul 14 23:09:19.750209 kernel: IPI shorthand broadcast: enabled Jul 14 23:09:19.750215 kernel: sched_clock: Marking stable (902004381, 222369145)->(1187950309, -63576783) Jul 14 23:09:19.750222 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 14 23:09:19.750228 kernel: registered taskstats version 1 Jul 14 23:09:19.750234 kernel: Loading compiled-in X.509 certificates Jul 14 23:09:19.750240 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.187-flatcar: 14a6940dcbc00bab0c83ae71c4abeb315720716d' Jul 14 23:09:19.750246 kernel: Key type .fscrypt registered Jul 14 23:09:19.750253 kernel: Key type fscrypt-provisioning registered Jul 14 23:09:19.750259 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 14 23:09:19.750265 kernel: ima: Allocated hash algorithm: sha1 Jul 14 23:09:19.750271 kernel: ima: No architecture policies found Jul 14 23:09:19.750277 kernel: clk: Disabling unused clocks Jul 14 23:09:19.750284 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 14 23:09:19.750291 kernel: Write protecting the kernel read-only data: 28672k Jul 14 23:09:19.750297 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 14 23:09:19.750303 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 14 23:09:19.750311 kernel: Run /init as init process Jul 14 23:09:19.750317 kernel: with arguments: Jul 14 23:09:19.750323 kernel: /init Jul 14 23:09:19.750329 kernel: with environment: Jul 14 23:09:19.750335 kernel: HOME=/ Jul 14 23:09:19.750341 kernel: TERM=linux Jul 14 23:09:19.750347 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 14 23:09:19.750364 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 23:09:19.750374 systemd[1]: Detected virtualization vmware. Jul 14 23:09:19.750380 systemd[1]: Detected architecture x86-64. Jul 14 23:09:19.750387 systemd[1]: Running in initrd. Jul 14 23:09:19.750393 systemd[1]: No hostname configured, using default hostname. Jul 14 23:09:19.750399 systemd[1]: Hostname set to . Jul 14 23:09:19.750405 systemd[1]: Initializing machine ID from random generator. Jul 14 23:09:19.750412 systemd[1]: Queued start job for default target initrd.target. Jul 14 23:09:19.750418 systemd[1]: Started systemd-ask-password-console.path. Jul 14 23:09:19.750425 systemd[1]: Reached target cryptsetup.target. Jul 14 23:09:19.750431 systemd[1]: Reached target paths.target. Jul 14 23:09:19.750437 systemd[1]: Reached target slices.target. Jul 14 23:09:19.750443 systemd[1]: Reached target swap.target. Jul 14 23:09:19.750450 systemd[1]: Reached target timers.target. Jul 14 23:09:19.750456 systemd[1]: Listening on iscsid.socket. Jul 14 23:09:19.750462 systemd[1]: Listening on iscsiuio.socket. Jul 14 23:09:19.750469 systemd[1]: Listening on systemd-journald-audit.socket. Jul 14 23:09:19.750476 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 14 23:09:19.750482 systemd[1]: Listening on systemd-journald.socket. Jul 14 23:09:19.750488 systemd[1]: Listening on systemd-networkd.socket. Jul 14 23:09:19.750495 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 23:09:19.750501 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 23:09:19.750507 systemd[1]: Reached target sockets.target. Jul 14 23:09:19.750513 systemd[1]: Starting kmod-static-nodes.service... Jul 14 23:09:19.750519 systemd[1]: Finished network-cleanup.service. Jul 14 23:09:19.750525 systemd[1]: Starting systemd-fsck-usr.service... Jul 14 23:09:19.750533 systemd[1]: Starting systemd-journald.service... Jul 14 23:09:19.750539 systemd[1]: Starting systemd-modules-load.service... Jul 14 23:09:19.750545 systemd[1]: Starting systemd-resolved.service... Jul 14 23:09:19.750551 systemd[1]: Starting systemd-vconsole-setup.service... Jul 14 23:09:19.750557 systemd[1]: Finished kmod-static-nodes.service. Jul 14 23:09:19.750564 systemd[1]: Finished systemd-fsck-usr.service. Jul 14 23:09:19.750570 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 14 23:09:19.750576 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 14 23:09:19.750583 kernel: audit: type=1130 audit(1752534559.687:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.750701 systemd[1]: Finished systemd-vconsole-setup.service. Jul 14 23:09:19.750708 systemd[1]: Starting dracut-cmdline-ask.service... Jul 14 23:09:19.750715 kernel: audit: type=1130 audit(1752534559.690:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.750722 systemd[1]: Finished dracut-cmdline-ask.service. Jul 14 23:09:19.750728 kernel: audit: type=1130 audit(1752534559.701:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.750734 systemd[1]: Starting dracut-cmdline.service... Jul 14 23:09:19.750740 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 14 23:09:19.750749 systemd[1]: Started systemd-resolved.service. Jul 14 23:09:19.750755 systemd[1]: Reached target nss-lookup.target. Jul 14 23:09:19.750762 kernel: audit: type=1130 audit(1752534559.735:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.750769 kernel: Bridge firewalling registered Jul 14 23:09:19.750779 systemd-journald[217]: Journal started Jul 14 23:09:19.750813 systemd-journald[217]: Runtime Journal (/run/log/journal/a4a50d95b02544e0b4d77dc8374b9890) is 4.8M, max 38.8M, 34.0M free. Jul 14 23:09:19.754246 systemd[1]: Started systemd-journald.service. Jul 14 23:09:19.754269 kernel: audit: type=1130 audit(1752534559.750:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.701000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.735000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.750000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.677327 systemd-modules-load[218]: Inserted module 'overlay' Jul 14 23:09:19.729686 systemd-resolved[219]: Positive Trust Anchors: Jul 14 23:09:19.729692 systemd-resolved[219]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 23:09:19.729712 systemd-resolved[219]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 23:09:19.735805 systemd-resolved[219]: Defaulting to hostname 'linux'. Jul 14 23:09:19.742960 systemd-modules-load[218]: Inserted module 'br_netfilter' Jul 14 23:09:19.756814 dracut-cmdline[233]: dracut-dracut-053 Jul 14 23:09:19.756814 dracut-cmdline[233]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 14 23:09:19.756814 dracut-cmdline[233]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=d9618a329f89744ce954b0fa1b02ce8164745af7389f9de9c3421ad2087e0dba Jul 14 23:09:19.759576 kernel: SCSI subsystem initialized Jul 14 23:09:19.771800 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 14 23:09:19.771838 kernel: device-mapper: uevent: version 1.0.3 Jul 14 23:09:19.772904 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 14 23:09:19.777371 kernel: Loading iSCSI transport class v2.0-870. Jul 14 23:09:19.777472 systemd-modules-load[218]: Inserted module 'dm_multipath' Jul 14 23:09:19.781799 kernel: audit: type=1130 audit(1752534559.776:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.778060 systemd[1]: Finished systemd-modules-load.service. Jul 14 23:09:19.778597 systemd[1]: Starting systemd-sysctl.service... Jul 14 23:09:19.786056 systemd[1]: Finished systemd-sysctl.service. Jul 14 23:09:19.784000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.789569 kernel: audit: type=1130 audit(1752534559.784:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.789594 kernel: iscsi: registered transport (tcp) Jul 14 23:09:19.807372 kernel: iscsi: registered transport (qla4xxx) Jul 14 23:09:19.807417 kernel: QLogic iSCSI HBA Driver Jul 14 23:09:19.825932 systemd[1]: Finished dracut-cmdline.service. Jul 14 23:09:19.824000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.826612 systemd[1]: Starting dracut-pre-udev.service... Jul 14 23:09:19.829387 kernel: audit: type=1130 audit(1752534559.824:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:19.866400 kernel: raid6: avx2x4 gen() 41827 MB/s Jul 14 23:09:19.882386 kernel: raid6: avx2x4 xor() 13595 MB/s Jul 14 23:09:19.899371 kernel: raid6: avx2x2 gen() 50374 MB/s Jul 14 23:09:19.916386 kernel: raid6: avx2x2 xor() 29799 MB/s Jul 14 23:09:19.933368 kernel: raid6: avx2x1 gen() 43661 MB/s Jul 14 23:09:19.950436 kernel: raid6: avx2x1 xor() 27579 MB/s Jul 14 23:09:19.967388 kernel: raid6: sse2x4 gen() 19044 MB/s Jul 14 23:09:19.984389 kernel: raid6: sse2x4 xor() 9412 MB/s Jul 14 23:09:20.001372 kernel: raid6: sse2x2 gen() 21292 MB/s Jul 14 23:09:20.018377 kernel: raid6: sse2x2 xor() 13225 MB/s Jul 14 23:09:20.035367 kernel: raid6: sse2x1 gen() 18076 MB/s Jul 14 23:09:20.052581 kernel: raid6: sse2x1 xor() 8884 MB/s Jul 14 23:09:20.052629 kernel: raid6: using algorithm avx2x2 gen() 50374 MB/s Jul 14 23:09:20.052647 kernel: raid6: .... xor() 29799 MB/s, rmw enabled Jul 14 23:09:20.053768 kernel: raid6: using avx2x2 recovery algorithm Jul 14 23:09:20.062368 kernel: xor: automatically using best checksumming function avx Jul 14 23:09:20.125374 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 14 23:09:20.128000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.129823 systemd[1]: Finished dracut-pre-udev.service. Jul 14 23:09:20.134591 kernel: audit: type=1130 audit(1752534560.128:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.128000 audit: BPF prog-id=7 op=LOAD Jul 14 23:09:20.128000 audit: BPF prog-id=8 op=LOAD Jul 14 23:09:20.130485 systemd[1]: Starting systemd-udevd.service... Jul 14 23:09:20.140784 systemd-udevd[415]: Using default interface naming scheme 'v252'. Jul 14 23:09:20.143674 systemd[1]: Started systemd-udevd.service. Jul 14 23:09:20.144274 systemd[1]: Starting dracut-pre-trigger.service... Jul 14 23:09:20.142000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.152480 dracut-pre-trigger[420]: rd.md=0: removing MD RAID activation Jul 14 23:09:20.167000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.169204 systemd[1]: Finished dracut-pre-trigger.service. Jul 14 23:09:20.169755 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 23:09:20.232000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:20.234124 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 23:09:20.289365 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 14 23:09:20.298304 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 14 23:09:20.298346 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 14 23:09:20.308311 kernel: vmw_pvscsi: using 64bit dma Jul 14 23:09:20.308336 kernel: vmw_pvscsi: max_id: 16 Jul 14 23:09:20.308382 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 14 23:09:20.308408 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 14 23:09:20.322505 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 14 23:09:20.322553 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 14 23:09:20.322566 kernel: vmw_pvscsi: using MSI-X Jul 14 23:09:20.322578 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 14 23:09:20.323480 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Jul 14 23:09:20.325683 kernel: libata version 3.00 loaded. Jul 14 23:09:20.327370 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 14 23:09:20.328362 kernel: cryptd: max_cpu_qlen set to 1000 Jul 14 23:09:20.337367 kernel: AVX2 version of gcm_enc/dec engaged. Jul 14 23:09:20.337401 kernel: AES CTR mode by8 optimization enabled Jul 14 23:09:20.340364 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 14 23:09:20.343366 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 14 23:09:20.352958 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 14 23:09:20.353742 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 14 23:09:20.353813 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 14 23:09:20.353888 kernel: sd 0:0:0:0: [sda] Cache data unavailable Jul 14 23:09:20.353958 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Jul 14 23:09:20.354019 kernel: scsi host1: ata_piix Jul 14 23:09:20.354080 kernel: scsi host2: ata_piix Jul 14 23:09:20.354141 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:20.354149 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 14 23:09:20.354156 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 14 23:09:20.354163 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 14 23:09:20.523372 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 14 23:09:20.528218 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 14 23:09:20.554364 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 14 23:09:20.579814 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 14 23:09:20.579827 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (461) Jul 14 23:09:20.579835 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 14 23:09:20.559194 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 14 23:09:20.563191 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 14 23:09:20.563294 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 14 23:09:20.563816 systemd[1]: Starting disk-uuid.service... Jul 14 23:09:20.567711 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 14 23:09:20.569793 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 23:09:20.590366 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:20.597370 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:21.596938 disk-uuid[547]: The operation has completed successfully. Jul 14 23:09:21.597365 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 14 23:09:21.645141 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 14 23:09:21.645427 systemd[1]: Finished disk-uuid.service. Jul 14 23:09:21.644000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.644000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.646190 systemd[1]: Starting verity-setup.service... Jul 14 23:09:21.656368 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 14 23:09:21.709931 systemd[1]: Found device dev-mapper-usr.device. Jul 14 23:09:21.710763 systemd[1]: Mounting sysusr-usr.mount... Jul 14 23:09:21.711122 systemd[1]: Finished verity-setup.service. Jul 14 23:09:21.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.770559 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 14 23:09:21.769252 systemd[1]: Mounted sysusr-usr.mount. Jul 14 23:09:21.769849 systemd[1]: Starting afterburn-network-kargs.service... Jul 14 23:09:21.770300 systemd[1]: Starting ignition-setup.service... Jul 14 23:09:21.791158 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 23:09:21.791203 kernel: BTRFS info (device sda6): using free space tree Jul 14 23:09:21.791218 kernel: BTRFS info (device sda6): has skinny extents Jul 14 23:09:21.798369 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 14 23:09:21.805834 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 14 23:09:21.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.810910 systemd[1]: Finished ignition-setup.service. Jul 14 23:09:21.811500 systemd[1]: Starting ignition-fetch-offline.service... Jul 14 23:09:21.866461 systemd[1]: Finished afterburn-network-kargs.service. Jul 14 23:09:21.865000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.867555 systemd[1]: Starting parse-ip-for-networkd.service... Jul 14 23:09:21.912193 systemd[1]: Finished parse-ip-for-networkd.service. Jul 14 23:09:21.910000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.911000 audit: BPF prog-id=9 op=LOAD Jul 14 23:09:21.913169 systemd[1]: Starting systemd-networkd.service... Jul 14 23:09:21.928619 systemd-networkd[732]: lo: Link UP Jul 14 23:09:21.928626 systemd-networkd[732]: lo: Gained carrier Jul 14 23:09:21.929121 systemd-networkd[732]: Enumeration completed Jul 14 23:09:21.928000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.929275 systemd[1]: Started systemd-networkd.service. Jul 14 23:09:21.929427 systemd[1]: Reached target network.target. Jul 14 23:09:21.929476 systemd-networkd[732]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 14 23:09:21.929921 systemd[1]: Starting iscsiuio.service... Jul 14 23:09:21.936347 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 14 23:09:21.936479 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 14 23:09:21.934000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.935487 systemd[1]: Started iscsiuio.service. Jul 14 23:09:21.936177 systemd[1]: Starting iscsid.service... Jul 14 23:09:21.937044 systemd-networkd[732]: ens192: Link UP Jul 14 23:09:21.937048 systemd-networkd[732]: ens192: Gained carrier Jul 14 23:09:21.938695 iscsid[737]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 14 23:09:21.938695 iscsid[737]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 14 23:09:21.938695 iscsid[737]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 14 23:09:21.938695 iscsid[737]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 14 23:09:21.938695 iscsid[737]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 14 23:09:21.938695 iscsid[737]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 14 23:09:21.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.940220 systemd[1]: Started iscsid.service. Jul 14 23:09:21.940868 systemd[1]: Starting dracut-initqueue.service... Jul 14 23:09:21.947857 systemd[1]: Finished dracut-initqueue.service. Jul 14 23:09:21.946000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.948042 systemd[1]: Reached target remote-fs-pre.target. Jul 14 23:09:21.948135 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 23:09:21.948316 systemd[1]: Reached target remote-fs.target. Jul 14 23:09:21.949128 systemd[1]: Starting dracut-pre-mount.service... Jul 14 23:09:21.954215 systemd[1]: Finished dracut-pre-mount.service. Jul 14 23:09:21.952000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:21.999248 ignition[604]: Ignition 2.14.0 Jul 14 23:09:21.999259 ignition[604]: Stage: fetch-offline Jul 14 23:09:21.999295 ignition[604]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:21.999314 ignition[604]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:22.023701 ignition[604]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:22.023812 ignition[604]: parsed url from cmdline: "" Jul 14 23:09:22.023817 ignition[604]: no config URL provided Jul 14 23:09:22.023821 ignition[604]: reading system config file "/usr/lib/ignition/user.ign" Jul 14 23:09:22.023826 ignition[604]: no config at "/usr/lib/ignition/user.ign" Jul 14 23:09:22.025085 ignition[604]: config successfully fetched Jul 14 23:09:22.025108 ignition[604]: parsing config with SHA512: 12c0c9c2ee46cb01e6c470082004f199f2210faaa183370d17608b8bb76c516bc63eddf67c7ba2bf941888121a5f6b170616225166d2b15a8ac6c34266723fd1 Jul 14 23:09:22.028452 unknown[604]: fetched base config from "system" Jul 14 23:09:22.028623 unknown[604]: fetched user config from "vmware" Jul 14 23:09:22.029131 ignition[604]: fetch-offline: fetch-offline passed Jul 14 23:09:22.029304 ignition[604]: Ignition finished successfully Jul 14 23:09:22.029969 systemd[1]: Finished ignition-fetch-offline.service. Jul 14 23:09:22.030141 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 14 23:09:22.028000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.030628 systemd[1]: Starting ignition-kargs.service... Jul 14 23:09:22.036556 ignition[752]: Ignition 2.14.0 Jul 14 23:09:22.036819 ignition[752]: Stage: kargs Jul 14 23:09:22.036992 ignition[752]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:22.037149 ignition[752]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:22.038812 ignition[752]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:22.040349 ignition[752]: kargs: kargs passed Jul 14 23:09:22.040509 ignition[752]: Ignition finished successfully Jul 14 23:09:22.041401 systemd[1]: Finished ignition-kargs.service. Jul 14 23:09:22.040000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.042006 systemd[1]: Starting ignition-disks.service... Jul 14 23:09:22.046564 ignition[758]: Ignition 2.14.0 Jul 14 23:09:22.046844 ignition[758]: Stage: disks Jul 14 23:09:22.047043 ignition[758]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:22.047200 ignition[758]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:22.048566 ignition[758]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:22.050219 ignition[758]: disks: disks passed Jul 14 23:09:22.050273 ignition[758]: Ignition finished successfully Jul 14 23:09:22.050984 systemd[1]: Finished ignition-disks.service. Jul 14 23:09:22.051170 systemd[1]: Reached target initrd-root-device.target. Jul 14 23:09:22.049000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.051281 systemd[1]: Reached target local-fs-pre.target. Jul 14 23:09:22.051462 systemd[1]: Reached target local-fs.target. Jul 14 23:09:22.051617 systemd[1]: Reached target sysinit.target. Jul 14 23:09:22.051771 systemd[1]: Reached target basic.target. Jul 14 23:09:22.052463 systemd[1]: Starting systemd-fsck-root.service... Jul 14 23:09:22.067244 systemd-fsck[766]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 14 23:09:22.069069 systemd[1]: Finished systemd-fsck-root.service. Jul 14 23:09:22.067000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.069704 systemd[1]: Mounting sysroot.mount... Jul 14 23:09:22.080327 systemd[1]: Mounted sysroot.mount. Jul 14 23:09:22.080545 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 14 23:09:22.080510 systemd[1]: Reached target initrd-root-fs.target. Jul 14 23:09:22.082831 systemd[1]: Mounting sysroot-usr.mount... Jul 14 23:09:22.083178 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 14 23:09:22.083200 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 14 23:09:22.083215 systemd[1]: Reached target ignition-diskful.target. Jul 14 23:09:22.084657 systemd[1]: Mounted sysroot-usr.mount. Jul 14 23:09:22.085180 systemd[1]: Starting initrd-setup-root.service... Jul 14 23:09:22.088648 initrd-setup-root[776]: cut: /sysroot/etc/passwd: No such file or directory Jul 14 23:09:22.092599 initrd-setup-root[784]: cut: /sysroot/etc/group: No such file or directory Jul 14 23:09:22.094799 initrd-setup-root[792]: cut: /sysroot/etc/shadow: No such file or directory Jul 14 23:09:22.097376 initrd-setup-root[800]: cut: /sysroot/etc/gshadow: No such file or directory Jul 14 23:09:22.137728 systemd[1]: Finished initrd-setup-root.service. Jul 14 23:09:22.136000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.138429 systemd[1]: Starting ignition-mount.service... Jul 14 23:09:22.138955 systemd[1]: Starting sysroot-boot.service... Jul 14 23:09:22.143666 bash[817]: umount: /sysroot/usr/share/oem: not mounted. Jul 14 23:09:22.150216 ignition[818]: INFO : Ignition 2.14.0 Jul 14 23:09:22.150480 ignition[818]: INFO : Stage: mount Jul 14 23:09:22.150654 ignition[818]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:22.150805 ignition[818]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:22.152340 ignition[818]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:22.154342 ignition[818]: INFO : mount: mount passed Jul 14 23:09:22.154505 ignition[818]: INFO : Ignition finished successfully Jul 14 23:09:22.155072 systemd[1]: Finished ignition-mount.service. Jul 14 23:09:22.153000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.197626 systemd[1]: Finished sysroot-boot.service. Jul 14 23:09:22.196000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:22.734520 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 14 23:09:22.759080 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (827) Jul 14 23:09:22.759112 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 14 23:09:22.759120 kernel: BTRFS info (device sda6): using free space tree Jul 14 23:09:22.759744 kernel: BTRFS info (device sda6): has skinny extents Jul 14 23:09:22.763366 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 14 23:09:22.764947 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 14 23:09:22.765642 systemd[1]: Starting ignition-files.service... Jul 14 23:09:22.774234 ignition[847]: INFO : Ignition 2.14.0 Jul 14 23:09:22.774234 ignition[847]: INFO : Stage: files Jul 14 23:09:22.774547 ignition[847]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:22.774547 ignition[847]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:22.775595 ignition[847]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:22.777760 ignition[847]: DEBUG : files: compiled without relabeling support, skipping Jul 14 23:09:22.778136 ignition[847]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 14 23:09:22.778136 ignition[847]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 14 23:09:22.780131 ignition[847]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 14 23:09:22.780367 ignition[847]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 14 23:09:22.780823 unknown[847]: wrote ssh authorized keys file for user: core Jul 14 23:09:22.781270 ignition[847]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 14 23:09:22.781751 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 14 23:09:22.781751 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 14 23:09:22.826601 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 14 23:09:22.982075 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 14 23:09:22.982326 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 14 23:09:22.984047 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 14 23:09:22.984262 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 14 23:09:22.984434 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 14 23:09:22.984434 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 23:09:22.984434 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 14 23:09:22.984434 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 23:09:22.985102 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 14 23:09:22.985102 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 23:09:22.985415 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 14 23:09:22.985415 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 14 23:09:22.985415 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 14 23:09:22.986251 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 14 23:09:22.987491 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 14 23:09:22.990159 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3799673204" Jul 14 23:09:22.990383 ignition[847]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3799673204": device or resource busy Jul 14 23:09:22.990588 ignition[847]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem3799673204", trying btrfs: device or resource busy Jul 14 23:09:22.990804 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3799673204" Jul 14 23:09:22.992387 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem3799673204" Jul 14 23:09:22.993080 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem3799673204" Jul 14 23:09:22.993891 systemd[1]: mnt-oem3799673204.mount: Deactivated successfully. Jul 14 23:09:22.994275 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem3799673204" Jul 14 23:09:22.994480 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 14 23:09:22.994681 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 14 23:09:22.994934 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 14 23:09:23.284537 systemd-networkd[732]: ens192: Gained IPv6LL Jul 14 23:09:23.467450 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 14 23:09:23.664782 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 14 23:09:23.665035 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 14 23:09:23.665207 ignition[847]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 14 23:09:23.665207 ignition[847]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Jul 14 23:09:23.666508 ignition[847]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 23:09:23.714695 ignition[847]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 14 23:09:23.714910 ignition[847]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Jul 14 23:09:23.714910 ignition[847]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 14 23:09:23.714910 ignition[847]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 14 23:09:23.714910 ignition[847]: INFO : files: files passed Jul 14 23:09:23.714910 ignition[847]: INFO : Ignition finished successfully Jul 14 23:09:23.716158 systemd[1]: Finished ignition-files.service. Jul 14 23:09:23.714000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.716771 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 14 23:09:23.716905 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 14 23:09:23.717313 systemd[1]: Starting ignition-quench.service... Jul 14 23:09:23.720324 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 14 23:09:23.720385 systemd[1]: Finished ignition-quench.service. Jul 14 23:09:23.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.719000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.721477 initrd-setup-root-after-ignition[873]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 14 23:09:23.721836 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 14 23:09:23.720000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.721992 systemd[1]: Reached target ignition-complete.target. Jul 14 23:09:23.722503 systemd[1]: Starting initrd-parse-etc.service... Jul 14 23:09:23.729000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.729000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.730569 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 14 23:09:23.730621 systemd[1]: Finished initrd-parse-etc.service. Jul 14 23:09:23.730794 systemd[1]: Reached target initrd-fs.target. Jul 14 23:09:23.730884 systemd[1]: Reached target initrd.target. Jul 14 23:09:23.730994 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 14 23:09:23.731819 systemd[1]: Starting dracut-pre-pivot.service... Jul 14 23:09:23.740365 kernel: kauditd_printk_skb: 30 callbacks suppressed Jul 14 23:09:23.740391 kernel: audit: type=1130 audit(1752534563.736:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.736000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.738146 systemd[1]: Finished dracut-pre-pivot.service. Jul 14 23:09:23.741633 systemd[1]: Starting initrd-cleanup.service... Jul 14 23:09:23.747644 systemd[1]: Stopped target nss-lookup.target. Jul 14 23:09:23.747924 systemd[1]: Stopped target remote-cryptsetup.target. Jul 14 23:09:23.748203 systemd[1]: Stopped target timers.target. Jul 14 23:09:23.748468 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 14 23:09:23.748709 systemd[1]: Stopped dracut-pre-pivot.service. Jul 14 23:09:23.747000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.749101 systemd[1]: Stopped target initrd.target. Jul 14 23:09:23.751464 kernel: audit: type=1131 audit(1752534563.747:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.751626 systemd[1]: Stopped target basic.target. Jul 14 23:09:23.751877 systemd[1]: Stopped target ignition-complete.target. Jul 14 23:09:23.752139 systemd[1]: Stopped target ignition-diskful.target. Jul 14 23:09:23.752413 systemd[1]: Stopped target initrd-root-device.target. Jul 14 23:09:23.752675 systemd[1]: Stopped target remote-fs.target. Jul 14 23:09:23.752942 systemd[1]: Stopped target remote-fs-pre.target. Jul 14 23:09:23.753253 systemd[1]: Stopped target sysinit.target. Jul 14 23:09:23.753522 systemd[1]: Stopped target local-fs.target. Jul 14 23:09:23.753769 systemd[1]: Stopped target local-fs-pre.target. Jul 14 23:09:23.754027 systemd[1]: Stopped target swap.target. Jul 14 23:09:23.754248 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 14 23:09:23.754452 systemd[1]: Stopped dracut-pre-mount.service. Jul 14 23:09:23.753000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.754780 systemd[1]: Stopped target cryptsetup.target. Jul 14 23:09:23.757228 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 14 23:09:23.757366 kernel: audit: type=1131 audit(1752534563.753:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.757436 systemd[1]: Stopped dracut-initqueue.service. Jul 14 23:09:23.757620 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 14 23:09:23.760199 kernel: audit: type=1131 audit(1752534563.756:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.756000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.757678 systemd[1]: Stopped ignition-fetch-offline.service. Jul 14 23:09:23.760336 systemd[1]: Stopped target paths.target. Jul 14 23:09:23.762957 kernel: audit: type=1131 audit(1752534563.759:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.759000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.762868 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 14 23:09:23.765370 systemd[1]: Stopped systemd-ask-password-console.path. Jul 14 23:09:23.765526 systemd[1]: Stopped target slices.target. Jul 14 23:09:23.765708 systemd[1]: Stopped target sockets.target. Jul 14 23:09:23.765891 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 14 23:09:23.765963 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 14 23:09:23.768886 kernel: audit: type=1131 audit(1752534563.764:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.764000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.766114 systemd[1]: ignition-files.service: Deactivated successfully. Jul 14 23:09:23.766170 systemd[1]: Stopped ignition-files.service. Jul 14 23:09:23.767000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.769312 systemd[1]: Stopping ignition-mount.service... Jul 14 23:09:23.772701 kernel: audit: type=1131 audit(1752534563.767:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.772759 iscsid[737]: iscsid shutting down. Jul 14 23:09:23.771878 systemd[1]: Stopping iscsid.service... Jul 14 23:09:23.771960 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 14 23:09:23.772050 systemd[1]: Stopped kmod-static-nodes.service. Jul 14 23:09:23.773296 systemd[1]: Stopping sysroot-boot.service... Jul 14 23:09:23.773636 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 14 23:09:23.773912 systemd[1]: Stopped systemd-udev-trigger.service. Jul 14 23:09:23.774287 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 14 23:09:23.770000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.776923 ignition[886]: INFO : Ignition 2.14.0 Jul 14 23:09:23.776923 ignition[886]: INFO : Stage: umount Jul 14 23:09:23.776923 ignition[886]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 14 23:09:23.776923 ignition[886]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 14 23:09:23.778050 kernel: audit: type=1131 audit(1752534563.770:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.777266 systemd[1]: Stopped dracut-pre-trigger.service. Jul 14 23:09:23.779462 systemd[1]: iscsid.service: Deactivated successfully. Jul 14 23:09:23.779518 systemd[1]: Stopped iscsid.service. Jul 14 23:09:23.782522 kernel: audit: type=1131 audit(1752534563.772:49): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.772000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.782572 ignition[886]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 14 23:09:23.782572 ignition[886]: INFO : umount: umount passed Jul 14 23:09:23.782572 ignition[886]: INFO : Ignition finished successfully Jul 14 23:09:23.783297 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 14 23:09:23.783346 systemd[1]: Stopped ignition-mount.service. Jul 14 23:09:23.784528 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 14 23:09:23.784585 systemd[1]: Finished initrd-cleanup.service. Jul 14 23:09:23.785756 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 14 23:09:23.776000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.788974 systemd[1]: iscsid.socket: Deactivated successfully. Jul 14 23:09:23.789129 systemd[1]: Closed iscsid.socket. Jul 14 23:09:23.789331 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 14 23:09:23.789459 kernel: audit: type=1131 audit(1752534563.776:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.789505 systemd[1]: Stopped ignition-disks.service. Jul 14 23:09:23.789725 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 14 23:09:23.789872 systemd[1]: Stopped ignition-kargs.service. Jul 14 23:09:23.790087 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 14 23:09:23.790234 systemd[1]: Stopped ignition-setup.service. Jul 14 23:09:23.790872 systemd[1]: Stopping iscsiuio.service... Jul 14 23:09:23.781000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.783000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.783000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.788000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.791972 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 14 23:09:23.792152 systemd[1]: Stopped iscsiuio.service. Jul 14 23:09:23.790000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.792467 systemd[1]: Stopped target network.target. Jul 14 23:09:23.792678 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 14 23:09:23.792824 systemd[1]: Closed iscsiuio.socket. Jul 14 23:09:23.793274 systemd[1]: Stopping systemd-networkd.service... Jul 14 23:09:23.793542 systemd[1]: Stopping systemd-resolved.service... Jul 14 23:09:23.795096 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 14 23:09:23.795289 systemd[1]: Stopped systemd-networkd.service. Jul 14 23:09:23.794000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.795852 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 14 23:09:23.796011 systemd[1]: Closed systemd-networkd.socket. Jul 14 23:09:23.798136 systemd[1]: Stopping network-cleanup.service... Jul 14 23:09:23.798428 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 14 23:09:23.798590 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 14 23:09:23.798834 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 14 23:09:23.798991 systemd[1]: Stopped afterburn-network-kargs.service. Jul 14 23:09:23.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.799292 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 14 23:09:23.799456 systemd[1]: Stopped systemd-sysctl.service. Jul 14 23:09:23.799727 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 14 23:09:23.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.799946 systemd[1]: Stopped systemd-modules-load.service. Jul 14 23:09:23.798000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.799000 audit: BPF prog-id=9 op=UNLOAD Jul 14 23:09:23.802249 systemd[1]: Stopping systemd-udevd.service... Jul 14 23:09:23.803075 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 14 23:09:23.803508 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 14 23:09:23.803698 systemd[1]: Stopped systemd-resolved.service. Jul 14 23:09:23.802000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.806140 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 14 23:09:23.806342 systemd[1]: Stopped network-cleanup.service. Jul 14 23:09:23.805000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.806000 audit: BPF prog-id=6 op=UNLOAD Jul 14 23:09:23.807579 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 14 23:09:23.807784 systemd[1]: Stopped systemd-udevd.service. Jul 14 23:09:23.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.808249 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 14 23:09:23.808423 systemd[1]: Closed systemd-udevd-control.socket. Jul 14 23:09:23.808647 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 14 23:09:23.808800 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 14 23:09:23.809012 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 14 23:09:23.809161 systemd[1]: Stopped dracut-pre-udev.service. Jul 14 23:09:23.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.809527 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 14 23:09:23.809677 systemd[1]: Stopped dracut-cmdline.service. Jul 14 23:09:23.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.809929 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 14 23:09:23.810083 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 14 23:09:23.808000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.810876 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 14 23:09:23.811166 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 14 23:09:23.811329 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 14 23:09:23.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.814312 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 14 23:09:23.814380 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 14 23:09:23.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.841828 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 14 23:09:23.841912 systemd[1]: Stopped sysroot-boot.service. Jul 14 23:09:23.840000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.842196 systemd[1]: Reached target initrd-switch-root.target. Jul 14 23:09:23.842339 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 14 23:09:23.841000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:23.842384 systemd[1]: Stopped initrd-setup-root.service. Jul 14 23:09:23.843109 systemd[1]: Starting initrd-switch-root.service... Jul 14 23:09:23.849702 systemd[1]: Switching root. Jul 14 23:09:23.865562 systemd-journald[217]: Journal stopped Jul 14 23:09:26.702098 systemd-journald[217]: Received SIGTERM from PID 1 (systemd). Jul 14 23:09:26.702125 kernel: SELinux: Class mctp_socket not defined in policy. Jul 14 23:09:26.702134 kernel: SELinux: Class anon_inode not defined in policy. Jul 14 23:09:26.702141 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 14 23:09:26.702146 kernel: SELinux: policy capability network_peer_controls=1 Jul 14 23:09:26.702153 kernel: SELinux: policy capability open_perms=1 Jul 14 23:09:26.702160 kernel: SELinux: policy capability extended_socket_class=1 Jul 14 23:09:26.702166 kernel: SELinux: policy capability always_check_network=0 Jul 14 23:09:26.702172 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 14 23:09:26.702178 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 14 23:09:26.702184 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 14 23:09:26.702189 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 14 23:09:26.702197 systemd[1]: Successfully loaded SELinux policy in 39.840ms. Jul 14 23:09:26.702204 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 5.814ms. Jul 14 23:09:26.702213 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 14 23:09:26.702219 systemd[1]: Detected virtualization vmware. Jul 14 23:09:26.702227 systemd[1]: Detected architecture x86-64. Jul 14 23:09:26.702234 systemd[1]: Detected first boot. Jul 14 23:09:26.702241 systemd[1]: Initializing machine ID from random generator. Jul 14 23:09:26.702247 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 14 23:09:26.702254 systemd[1]: Populated /etc with preset unit settings. Jul 14 23:09:26.702261 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:09:26.702268 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:09:26.702276 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:09:26.702284 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 14 23:09:26.702291 systemd[1]: Stopped initrd-switch-root.service. Jul 14 23:09:26.702297 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 14 23:09:26.702307 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 14 23:09:26.702314 systemd[1]: Created slice system-addon\x2drun.slice. Jul 14 23:09:26.702320 systemd[1]: Created slice system-getty.slice. Jul 14 23:09:26.702327 systemd[1]: Created slice system-modprobe.slice. Jul 14 23:09:26.702335 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 14 23:09:26.702342 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 14 23:09:26.702349 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 14 23:09:26.702366 systemd[1]: Created slice user.slice. Jul 14 23:09:26.702374 systemd[1]: Started systemd-ask-password-console.path. Jul 14 23:09:26.702380 systemd[1]: Started systemd-ask-password-wall.path. Jul 14 23:09:26.702387 systemd[1]: Set up automount boot.automount. Jul 14 23:09:26.702394 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 14 23:09:26.702402 systemd[1]: Stopped target initrd-switch-root.target. Jul 14 23:09:26.702410 systemd[1]: Stopped target initrd-fs.target. Jul 14 23:09:26.702419 systemd[1]: Stopped target initrd-root-fs.target. Jul 14 23:09:26.702426 systemd[1]: Reached target integritysetup.target. Jul 14 23:09:26.702432 systemd[1]: Reached target remote-cryptsetup.target. Jul 14 23:09:26.702439 systemd[1]: Reached target remote-fs.target. Jul 14 23:09:26.702446 systemd[1]: Reached target slices.target. Jul 14 23:09:26.702453 systemd[1]: Reached target swap.target. Jul 14 23:09:26.702460 systemd[1]: Reached target torcx.target. Jul 14 23:09:26.702469 systemd[1]: Reached target veritysetup.target. Jul 14 23:09:26.702476 systemd[1]: Listening on systemd-coredump.socket. Jul 14 23:09:26.702483 systemd[1]: Listening on systemd-initctl.socket. Jul 14 23:09:26.702490 systemd[1]: Listening on systemd-networkd.socket. Jul 14 23:09:26.702497 systemd[1]: Listening on systemd-udevd-control.socket. Jul 14 23:09:26.702504 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 14 23:09:26.702513 systemd[1]: Listening on systemd-userdbd.socket. Jul 14 23:09:26.702520 systemd[1]: Mounting dev-hugepages.mount... Jul 14 23:09:26.702527 systemd[1]: Mounting dev-mqueue.mount... Jul 14 23:09:26.702534 systemd[1]: Mounting media.mount... Jul 14 23:09:26.702541 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:26.702549 systemd[1]: Mounting sys-kernel-debug.mount... Jul 14 23:09:26.702556 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 14 23:09:26.702564 systemd[1]: Mounting tmp.mount... Jul 14 23:09:26.702571 systemd[1]: Starting flatcar-tmpfiles.service... Jul 14 23:09:26.702578 systemd[1]: Starting ignition-delete-config.service... Jul 14 23:09:26.702585 systemd[1]: Starting kmod-static-nodes.service... Jul 14 23:09:26.702592 systemd[1]: Starting modprobe@configfs.service... Jul 14 23:09:26.702599 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:26.702606 systemd[1]: Starting modprobe@drm.service... Jul 14 23:09:26.702613 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:26.702621 systemd[1]: Starting modprobe@fuse.service... Jul 14 23:09:26.702629 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:26.702637 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 14 23:09:26.702644 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 14 23:09:26.702651 systemd[1]: Stopped systemd-fsck-root.service. Jul 14 23:09:26.702658 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 14 23:09:26.702665 systemd[1]: Stopped systemd-fsck-usr.service. Jul 14 23:09:26.702673 systemd[1]: Stopped systemd-journald.service. Jul 14 23:09:26.702679 systemd[1]: Starting systemd-journald.service... Jul 14 23:09:26.702686 systemd[1]: Starting systemd-modules-load.service... Jul 14 23:09:26.702694 systemd[1]: Starting systemd-network-generator.service... Jul 14 23:09:26.702702 systemd[1]: Starting systemd-remount-fs.service... Jul 14 23:09:26.702709 systemd[1]: Starting systemd-udev-trigger.service... Jul 14 23:09:26.702716 systemd[1]: verity-setup.service: Deactivated successfully. Jul 14 23:09:26.702723 systemd[1]: Stopped verity-setup.service. Jul 14 23:09:26.702730 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:26.702737 systemd[1]: Mounted dev-hugepages.mount. Jul 14 23:09:26.702744 kernel: fuse: init (API version 7.34) Jul 14 23:09:26.702751 systemd[1]: Mounted dev-mqueue.mount. Jul 14 23:09:26.702759 systemd[1]: Mounted media.mount. Jul 14 23:09:26.702767 systemd[1]: Mounted sys-kernel-debug.mount. Jul 14 23:09:26.702774 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 14 23:09:26.702781 systemd[1]: Mounted tmp.mount. Jul 14 23:09:26.702788 systemd[1]: Finished kmod-static-nodes.service. Jul 14 23:09:26.702796 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:26.702803 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:26.702810 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 23:09:26.702817 systemd[1]: Finished modprobe@drm.service. Jul 14 23:09:26.702825 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:26.702833 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:26.702840 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 14 23:09:26.702847 systemd[1]: Finished modprobe@fuse.service. Jul 14 23:09:26.702854 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 14 23:09:26.702866 systemd[1]: Finished modprobe@configfs.service. Jul 14 23:09:26.702874 systemd[1]: Finished systemd-modules-load.service. Jul 14 23:09:26.702881 systemd[1]: Finished systemd-network-generator.service. Jul 14 23:09:26.702888 kernel: loop: module loaded Jul 14 23:09:26.702896 systemd[1]: Finished systemd-remount-fs.service. Jul 14 23:09:26.702904 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:26.702911 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:26.702918 systemd[1]: Reached target network-pre.target. Jul 14 23:09:26.702925 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 14 23:09:26.702936 systemd-journald[1005]: Journal started Jul 14 23:09:26.702973 systemd-journald[1005]: Runtime Journal (/run/log/journal/0f2a2885942b4a4795c6557ae40b6118) is 4.8M, max 38.8M, 34.0M free. Jul 14 23:09:24.206000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 14 23:09:24.250000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 23:09:24.250000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 14 23:09:24.250000 audit: BPF prog-id=10 op=LOAD Jul 14 23:09:24.250000 audit: BPF prog-id=10 op=UNLOAD Jul 14 23:09:24.250000 audit: BPF prog-id=11 op=LOAD Jul 14 23:09:24.250000 audit: BPF prog-id=11 op=UNLOAD Jul 14 23:09:24.539000 audit[921]: AVC avc: denied { associate } for pid=921 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 14 23:09:24.539000 audit[921]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8a2 a1=c0000cede0 a2=c0000d7040 a3=32 items=0 ppid=904 pid=921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:24.539000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 23:09:24.541000 audit[921]: AVC avc: denied { associate } for pid=921 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 14 23:09:24.541000 audit[921]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c000024030 a2=1ed a3=0 items=2 ppid=904 pid=921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:24.541000 audit: CWD cwd="/" Jul 14 23:09:24.541000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:24.541000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:24.541000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 14 23:09:26.576000 audit: BPF prog-id=12 op=LOAD Jul 14 23:09:26.576000 audit: BPF prog-id=3 op=UNLOAD Jul 14 23:09:26.576000 audit: BPF prog-id=13 op=LOAD Jul 14 23:09:26.576000 audit: BPF prog-id=14 op=LOAD Jul 14 23:09:26.576000 audit: BPF prog-id=4 op=UNLOAD Jul 14 23:09:26.576000 audit: BPF prog-id=5 op=UNLOAD Jul 14 23:09:26.577000 audit: BPF prog-id=15 op=LOAD Jul 14 23:09:26.577000 audit: BPF prog-id=12 op=UNLOAD Jul 14 23:09:26.577000 audit: BPF prog-id=16 op=LOAD Jul 14 23:09:26.577000 audit: BPF prog-id=17 op=LOAD Jul 14 23:09:26.577000 audit: BPF prog-id=13 op=UNLOAD Jul 14 23:09:26.577000 audit: BPF prog-id=14 op=UNLOAD Jul 14 23:09:26.578000 audit: BPF prog-id=18 op=LOAD Jul 14 23:09:26.578000 audit: BPF prog-id=15 op=UNLOAD Jul 14 23:09:26.578000 audit: BPF prog-id=19 op=LOAD Jul 14 23:09:26.578000 audit: BPF prog-id=20 op=LOAD Jul 14 23:09:26.578000 audit: BPF prog-id=16 op=UNLOAD Jul 14 23:09:26.578000 audit: BPF prog-id=17 op=UNLOAD Jul 14 23:09:26.578000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.580000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.580000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.586000 audit: BPF prog-id=18 op=UNLOAD Jul 14 23:09:26.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.647000 audit: BPF prog-id=21 op=LOAD Jul 14 23:09:26.647000 audit: BPF prog-id=22 op=LOAD Jul 14 23:09:26.647000 audit: BPF prog-id=23 op=LOAD Jul 14 23:09:26.647000 audit: BPF prog-id=19 op=UNLOAD Jul 14 23:09:26.647000 audit: BPF prog-id=20 op=UNLOAD Jul 14 23:09:26.662000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.676000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.678000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.685000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.685000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.687000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.690000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.691000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 14 23:09:26.691000 audit[1005]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=3 a1=7ffe8c1fdf20 a2=4000 a3=7ffe8c1fdfbc items=0 ppid=1 pid=1005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:26.691000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 14 23:09:26.692000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.576242 systemd[1]: Queued start job for default target multi-user.target. Jul 14 23:09:24.514862 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:09:26.576251 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 14 23:09:24.521768 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 23:09:26.579796 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 14 23:09:24.521783 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 23:09:24.521807 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 14 23:09:24.521815 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 14 23:09:24.521838 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 14 23:09:24.521846 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 14 23:09:24.521997 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 14 23:09:26.705459 jq[988]: true Jul 14 23:09:24.522026 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 14 23:09:24.522036 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 14 23:09:24.532395 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 14 23:09:24.532416 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 14 23:09:24.532427 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.101: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.101 Jul 14 23:09:24.532436 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 14 23:09:24.532445 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.101: no such file or directory" path=/var/lib/torcx/store/3510.3.101 Jul 14 23:09:24.532453 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:24Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 14 23:09:26.249904 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:26Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.250066 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:26Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.250129 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:26Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.250242 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:26Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 14 23:09:26.706154 jq[1014]: true Jul 14 23:09:26.250278 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:26Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 14 23:09:26.250324 /usr/lib/systemd/system-generators/torcx-generator[921]: time="2025-07-14T23:09:26Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 14 23:09:26.706363 systemd[1]: Mounting sys-kernel-config.mount... Jul 14 23:09:26.708367 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 14 23:09:26.714446 systemd[1]: Starting systemd-hwdb-update.service... Jul 14 23:09:26.714479 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:26.715544 systemd[1]: Starting systemd-random-seed.service... Jul 14 23:09:26.715567 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:26.718834 systemd[1]: Starting systemd-sysctl.service... Jul 14 23:09:26.721756 systemd[1]: Started systemd-journald.service. Jul 14 23:09:26.719000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.722746 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 14 23:09:26.722898 systemd[1]: Mounted sys-kernel-config.mount. Jul 14 23:09:26.723108 systemd[1]: Finished systemd-random-seed.service. Jul 14 23:09:26.721000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.723462 systemd[1]: Reached target first-boot-complete.target. Jul 14 23:09:26.724752 systemd[1]: Starting systemd-journal-flush.service... Jul 14 23:09:26.730773 systemd-journald[1005]: Time spent on flushing to /var/log/journal/0f2a2885942b4a4795c6557ae40b6118 is 54.189ms for 2005 entries. Jul 14 23:09:26.730773 systemd-journald[1005]: System Journal (/var/log/journal/0f2a2885942b4a4795c6557ae40b6118) is 8.0M, max 584.8M, 576.8M free. Jul 14 23:09:26.793190 systemd-journald[1005]: Received client request to flush runtime journal. Jul 14 23:09:26.741000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.792000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.742942 systemd[1]: Finished systemd-sysctl.service. Jul 14 23:09:26.756821 systemd[1]: Finished flatcar-tmpfiles.service. Jul 14 23:09:26.757836 systemd[1]: Starting systemd-sysusers.service... Jul 14 23:09:26.793923 systemd[1]: Finished systemd-journal-flush.service. Jul 14 23:09:26.794610 systemd[1]: Finished systemd-sysusers.service. Jul 14 23:09:26.793000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.820013 systemd[1]: Finished systemd-udev-trigger.service. Jul 14 23:09:26.818000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:26.821028 systemd[1]: Starting systemd-udev-settle.service... Jul 14 23:09:26.826576 udevadm[1051]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 14 23:09:26.848855 ignition[1023]: Ignition 2.14.0 Jul 14 23:09:26.849075 ignition[1023]: deleting config from guestinfo properties Jul 14 23:09:26.852507 ignition[1023]: Successfully deleted config Jul 14 23:09:26.853217 systemd[1]: Finished ignition-delete-config.service. Jul 14 23:09:26.851000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.211062 systemd[1]: Finished systemd-hwdb-update.service. Jul 14 23:09:27.209000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.210000 audit: BPF prog-id=24 op=LOAD Jul 14 23:09:27.210000 audit: BPF prog-id=25 op=LOAD Jul 14 23:09:27.210000 audit: BPF prog-id=7 op=UNLOAD Jul 14 23:09:27.210000 audit: BPF prog-id=8 op=UNLOAD Jul 14 23:09:27.212196 systemd[1]: Starting systemd-udevd.service... Jul 14 23:09:27.223889 systemd-udevd[1052]: Using default interface naming scheme 'v252'. Jul 14 23:09:27.245987 systemd[1]: Started systemd-udevd.service. Jul 14 23:09:27.244000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.245000 audit: BPF prog-id=26 op=LOAD Jul 14 23:09:27.247419 systemd[1]: Starting systemd-networkd.service... Jul 14 23:09:27.256000 audit: BPF prog-id=27 op=LOAD Jul 14 23:09:27.256000 audit: BPF prog-id=28 op=LOAD Jul 14 23:09:27.256000 audit: BPF prog-id=29 op=LOAD Jul 14 23:09:27.258287 systemd[1]: Starting systemd-userdbd.service... Jul 14 23:09:27.279978 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 14 23:09:27.282224 systemd[1]: Started systemd-userdbd.service. Jul 14 23:09:27.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.307365 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 14 23:09:27.312365 kernel: ACPI: button: Power Button [PWRF] Jul 14 23:09:27.371202 systemd-networkd[1061]: lo: Link UP Jul 14 23:09:27.371207 systemd-networkd[1061]: lo: Gained carrier Jul 14 23:09:27.371566 systemd-networkd[1061]: Enumeration completed Jul 14 23:09:27.371625 systemd[1]: Started systemd-networkd.service. Jul 14 23:09:27.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.371831 systemd-networkd[1061]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 14 23:09:27.374762 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 14 23:09:27.374899 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 14 23:09:27.374979 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 14 23:09:27.376044 systemd-networkd[1061]: ens192: Link UP Jul 14 23:09:27.376132 systemd-networkd[1061]: ens192: Gained carrier Jul 14 23:09:27.384000 audit[1060]: AVC avc: denied { confidentiality } for pid=1060 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 14 23:09:27.384000 audit[1060]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=556654a25980 a1=338ac a2=7f4021a20bc5 a3=5 items=110 ppid=1052 pid=1060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:09:27.384000 audit: CWD cwd="/" Jul 14 23:09:27.384000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=1 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=2 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=3 name=(null) inode=17745 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=4 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=5 name=(null) inode=17746 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=6 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=7 name=(null) inode=17747 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=8 name=(null) inode=17747 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=9 name=(null) inode=17748 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=10 name=(null) inode=17747 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=11 name=(null) inode=17749 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=12 name=(null) inode=17747 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=13 name=(null) inode=17750 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=14 name=(null) inode=17747 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=15 name=(null) inode=17751 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=16 name=(null) inode=17747 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=17 name=(null) inode=17752 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=18 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=19 name=(null) inode=17753 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=20 name=(null) inode=17753 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=21 name=(null) inode=17754 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=22 name=(null) inode=17753 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=23 name=(null) inode=17755 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=24 name=(null) inode=17753 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=25 name=(null) inode=17756 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=26 name=(null) inode=17753 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=27 name=(null) inode=17757 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=28 name=(null) inode=17753 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=29 name=(null) inode=17758 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=30 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=31 name=(null) inode=17759 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=32 name=(null) inode=17759 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=33 name=(null) inode=17760 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=34 name=(null) inode=17759 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=35 name=(null) inode=17761 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=36 name=(null) inode=17759 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=37 name=(null) inode=17762 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=38 name=(null) inode=17759 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=39 name=(null) inode=17763 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=40 name=(null) inode=17759 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=41 name=(null) inode=17764 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=42 name=(null) inode=17744 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=43 name=(null) inode=17765 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=44 name=(null) inode=17765 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=45 name=(null) inode=17766 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=46 name=(null) inode=17765 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=47 name=(null) inode=17767 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=48 name=(null) inode=17765 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=49 name=(null) inode=17768 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=50 name=(null) inode=17765 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=51 name=(null) inode=17769 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=52 name=(null) inode=17765 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=53 name=(null) inode=17770 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=55 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=56 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=57 name=(null) inode=17772 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=58 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=59 name=(null) inode=17773 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=60 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=61 name=(null) inode=17774 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=62 name=(null) inode=17774 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=63 name=(null) inode=17775 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=64 name=(null) inode=17774 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=65 name=(null) inode=17776 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=66 name=(null) inode=17774 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=67 name=(null) inode=17777 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=68 name=(null) inode=17774 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=69 name=(null) inode=17778 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=70 name=(null) inode=17774 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=71 name=(null) inode=17779 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=72 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=73 name=(null) inode=17780 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=74 name=(null) inode=17780 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=75 name=(null) inode=17781 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=76 name=(null) inode=17780 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=77 name=(null) inode=17782 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=78 name=(null) inode=17780 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=79 name=(null) inode=17783 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=80 name=(null) inode=17780 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=81 name=(null) inode=17784 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=82 name=(null) inode=17780 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=83 name=(null) inode=17785 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=84 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=85 name=(null) inode=17786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=86 name=(null) inode=17786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=87 name=(null) inode=17787 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=88 name=(null) inode=17786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=89 name=(null) inode=17788 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=90 name=(null) inode=17786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=91 name=(null) inode=17789 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=92 name=(null) inode=17786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=93 name=(null) inode=17790 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=94 name=(null) inode=17786 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=95 name=(null) inode=17791 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=96 name=(null) inode=17771 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=97 name=(null) inode=17792 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=98 name=(null) inode=17792 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=99 name=(null) inode=17793 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=100 name=(null) inode=17792 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=101 name=(null) inode=17794 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=102 name=(null) inode=17792 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=103 name=(null) inode=17795 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=104 name=(null) inode=17792 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=105 name=(null) inode=17796 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=106 name=(null) inode=17792 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=107 name=(null) inode=17797 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PATH item=109 name=(null) inode=17798 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:09:27.384000 audit: PROCTITLE proctitle="(udev-worker)" Jul 14 23:09:27.392369 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 14 23:09:27.401378 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 14 23:09:27.407743 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 14 23:09:27.402190 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 14 23:09:27.409365 kernel: Guest personality initialized and is active Jul 14 23:09:27.412490 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 14 23:09:27.412513 kernel: Initialized host personality Jul 14 23:09:27.431373 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 14 23:09:27.441489 (udev-worker)[1068]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 14 23:09:27.444369 kernel: mousedev: PS/2 mouse device common for all mice Jul 14 23:09:27.458576 systemd[1]: Finished systemd-udev-settle.service. Jul 14 23:09:27.457000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.459494 systemd[1]: Starting lvm2-activation-early.service... Jul 14 23:09:27.496490 lvm[1085]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 23:09:27.519980 systemd[1]: Finished lvm2-activation-early.service. Jul 14 23:09:27.518000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.520170 systemd[1]: Reached target cryptsetup.target. Jul 14 23:09:27.521094 systemd[1]: Starting lvm2-activation.service... Jul 14 23:09:27.523856 lvm[1086]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 14 23:09:27.541006 systemd[1]: Finished lvm2-activation.service. Jul 14 23:09:27.539000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.541199 systemd[1]: Reached target local-fs-pre.target. Jul 14 23:09:27.541299 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 14 23:09:27.541316 systemd[1]: Reached target local-fs.target. Jul 14 23:09:27.541417 systemd[1]: Reached target machines.target. Jul 14 23:09:27.542396 systemd[1]: Starting ldconfig.service... Jul 14 23:09:27.543038 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:27.543079 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:27.543952 systemd[1]: Starting systemd-boot-update.service... Jul 14 23:09:27.544829 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 14 23:09:27.545654 systemd[1]: Starting systemd-machine-id-commit.service... Jul 14 23:09:27.546526 systemd[1]: Starting systemd-sysext.service... Jul 14 23:09:27.556000 systemd[1]: Unmounting usr-share-oem.mount... Jul 14 23:09:27.557595 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1088 (bootctl) Jul 14 23:09:27.558508 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 14 23:09:27.572190 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 14 23:09:27.572302 systemd[1]: Unmounted usr-share-oem.mount. Jul 14 23:09:27.574839 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 14 23:09:27.573000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.589376 kernel: loop0: detected capacity change from 0 to 221472 Jul 14 23:09:27.982000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:27.983056 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 14 23:09:27.983566 systemd[1]: Finished systemd-machine-id-commit.service. Jul 14 23:09:28.000367 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 14 23:09:28.018662 systemd-fsck[1097]: fsck.fat 4.2 (2021-01-31) Jul 14 23:09:28.018662 systemd-fsck[1097]: /dev/sda1: 790 files, 120725/258078 clusters Jul 14 23:09:28.022438 kernel: loop1: detected capacity change from 0 to 221472 Jul 14 23:09:28.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.020881 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 14 23:09:28.021951 systemd[1]: Mounting boot.mount... Jul 14 23:09:28.039519 systemd[1]: Mounted boot.mount. Jul 14 23:09:28.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.125007 systemd[1]: Finished systemd-boot-update.service. Jul 14 23:09:28.252073 (sd-sysext)[1100]: Using extensions 'kubernetes'. Jul 14 23:09:28.252418 (sd-sysext)[1100]: Merged extensions into '/usr'. Jul 14 23:09:28.278113 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.279345 systemd[1]: Mounting usr-share-oem.mount... Jul 14 23:09:28.280364 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.282217 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.283729 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:28.283869 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.283951 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.284020 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.285612 systemd[1]: Mounted usr-share-oem.mount. Jul 14 23:09:28.285882 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.285960 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.284000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.284000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.286255 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.286322 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.286634 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:28.286701 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:28.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.287047 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.287108 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.287674 systemd[1]: Finished systemd-sysext.service. Jul 14 23:09:28.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.288608 systemd[1]: Starting ensure-sysext.service... Jul 14 23:09:28.289308 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 14 23:09:28.292931 systemd[1]: Reloading. Jul 14 23:09:28.334184 /usr/lib/systemd/system-generators/torcx-generator[1127]: time="2025-07-14T23:09:28Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:09:28.334201 /usr/lib/systemd/system-generators/torcx-generator[1127]: time="2025-07-14T23:09:28Z" level=info msg="torcx already run" Jul 14 23:09:28.395002 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:09:28.395119 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:09:28.406616 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:09:28.439189 systemd-tmpfiles[1108]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 14 23:09:28.440000 audit: BPF prog-id=30 op=LOAD Jul 14 23:09:28.440000 audit: BPF prog-id=26 op=UNLOAD Jul 14 23:09:28.441000 audit: BPF prog-id=31 op=LOAD Jul 14 23:09:28.441000 audit: BPF prog-id=32 op=LOAD Jul 14 23:09:28.441000 audit: BPF prog-id=24 op=UNLOAD Jul 14 23:09:28.441000 audit: BPF prog-id=25 op=UNLOAD Jul 14 23:09:28.442000 audit: BPF prog-id=33 op=LOAD Jul 14 23:09:28.442000 audit: BPF prog-id=21 op=UNLOAD Jul 14 23:09:28.442000 audit: BPF prog-id=34 op=LOAD Jul 14 23:09:28.442000 audit: BPF prog-id=35 op=LOAD Jul 14 23:09:28.442000 audit: BPF prog-id=22 op=UNLOAD Jul 14 23:09:28.442000 audit: BPF prog-id=23 op=UNLOAD Jul 14 23:09:28.442000 audit: BPF prog-id=36 op=LOAD Jul 14 23:09:28.442000 audit: BPF prog-id=27 op=UNLOAD Jul 14 23:09:28.443000 audit: BPF prog-id=37 op=LOAD Jul 14 23:09:28.443000 audit: BPF prog-id=38 op=LOAD Jul 14 23:09:28.443000 audit: BPF prog-id=28 op=UNLOAD Jul 14 23:09:28.443000 audit: BPF prog-id=29 op=UNLOAD Jul 14 23:09:28.450565 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.451333 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.452566 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.453368 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:28.453585 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.453651 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.453715 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.454197 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.454272 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.454877 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.454995 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.453000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.455434 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:28.455558 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:28.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.454000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.455969 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.456097 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.457064 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.457961 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.458840 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.459558 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:28.459675 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.459749 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.459833 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.460267 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.460344 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.459000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.459000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.461126 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.461197 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.461622 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:28.461694 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:28.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.460000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.460000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.462002 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.462071 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.463552 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.464264 systemd[1]: Starting modprobe@dm_mod.service... Jul 14 23:09:28.465081 systemd[1]: Starting modprobe@drm.service... Jul 14 23:09:28.465912 systemd[1]: Starting modprobe@efi_pstore.service... Jul 14 23:09:28.466939 systemd[1]: Starting modprobe@loop.service... Jul 14 23:09:28.467093 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.467178 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:09:28.468002 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 14 23:09:28.468517 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 14 23:09:28.469173 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 14 23:09:28.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.469283 systemd[1]: Finished modprobe@dm_mod.service. Jul 14 23:09:28.469615 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 14 23:09:28.469689 systemd[1]: Finished modprobe@efi_pstore.service. Jul 14 23:09:28.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.469992 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 14 23:09:28.470054 systemd[1]: Finished modprobe@drm.service. Jul 14 23:09:28.468000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.468000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.470475 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 14 23:09:28.470541 systemd[1]: Finished modprobe@loop.service. Jul 14 23:09:28.469000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.469000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.470920 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 14 23:09:28.470981 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 14 23:09:28.471830 systemd[1]: Finished ensure-sysext.service. Jul 14 23:09:28.470000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.546953 systemd-tmpfiles[1108]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 14 23:09:28.561306 systemd-tmpfiles[1108]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 14 23:09:28.696231 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 14 23:09:28.694000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.697505 systemd[1]: Starting audit-rules.service... Jul 14 23:09:28.698423 systemd[1]: Starting clean-ca-certificates.service... Jul 14 23:09:28.699251 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 14 23:09:28.698000 audit: BPF prog-id=39 op=LOAD Jul 14 23:09:28.699000 audit: BPF prog-id=40 op=LOAD Jul 14 23:09:28.700456 systemd[1]: Starting systemd-resolved.service... Jul 14 23:09:28.701849 systemd[1]: Starting systemd-timesyncd.service... Jul 14 23:09:28.703613 systemd[1]: Starting systemd-update-utmp.service... Jul 14 23:09:28.704567 systemd[1]: Finished clean-ca-certificates.service. Jul 14 23:09:28.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.704752 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 14 23:09:28.706000 audit[1205]: SYSTEM_BOOT pid=1205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.710252 systemd[1]: Finished systemd-update-utmp.service. Jul 14 23:09:28.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.755385 systemd[1]: Started systemd-timesyncd.service. Jul 14 23:09:28.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.755541 systemd[1]: Reached target time-set.target. Jul 14 23:09:28.758852 kernel: kauditd_printk_skb: 286 callbacks suppressed Jul 14 23:09:28.758897 kernel: audit: type=1130 audit(1752534568.754:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.760543 systemd-resolved[1203]: Positive Trust Anchors: Jul 14 23:09:28.760552 systemd-resolved[1203]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 14 23:09:28.760572 systemd-resolved[1203]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 14 23:09:28.760000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:09:28.761650 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 14 23:09:28.765376 kernel: audit: type=1130 audit(1752534568.760:216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:10:55.577835 systemd-timesyncd[1204]: Contacted time server 129.250.35.251:123 (0.flatcar.pool.ntp.org). Jul 14 23:10:55.578032 systemd-timesyncd[1204]: Initial clock synchronization to Mon 2025-07-14 23:10:55.577749 UTC. Jul 14 23:10:55.582000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 23:10:55.582000 audit[1221]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff10b75830 a2=420 a3=0 items=0 ppid=1200 pid=1221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:10:55.589296 kernel: audit: type=1305 audit(1752534655.582:217): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 14 23:10:55.589329 kernel: audit: type=1300 audit(1752534655.582:217): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff10b75830 a2=420 a3=0 items=0 ppid=1200 pid=1221 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:10:55.589349 kernel: audit: type=1327 audit(1752534655.582:217): proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 23:10:55.582000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 14 23:10:55.589383 augenrules[1221]: No rules Jul 14 23:10:55.589831 systemd[1]: Finished audit-rules.service. Jul 14 23:10:55.604295 systemd-resolved[1203]: Defaulting to hostname 'linux'. Jul 14 23:10:55.605427 systemd[1]: Started systemd-resolved.service. Jul 14 23:10:55.605569 systemd[1]: Reached target network.target. Jul 14 23:10:55.605656 systemd[1]: Reached target nss-lookup.target. Jul 14 23:10:55.639199 ldconfig[1087]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 14 23:10:55.654167 systemd[1]: Finished ldconfig.service. Jul 14 23:10:55.655242 systemd[1]: Starting systemd-update-done.service... Jul 14 23:10:55.659379 systemd[1]: Finished systemd-update-done.service. Jul 14 23:10:55.659594 systemd[1]: Reached target sysinit.target. Jul 14 23:10:55.659741 systemd[1]: Started motdgen.path. Jul 14 23:10:55.659873 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 14 23:10:55.660057 systemd[1]: Started logrotate.timer. Jul 14 23:10:55.660198 systemd[1]: Started mdadm.timer. Jul 14 23:10:55.660281 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 14 23:10:55.660374 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 14 23:10:55.660394 systemd[1]: Reached target paths.target. Jul 14 23:10:55.660481 systemd[1]: Reached target timers.target. Jul 14 23:10:55.660726 systemd[1]: Listening on dbus.socket. Jul 14 23:10:55.661560 systemd[1]: Starting docker.socket... Jul 14 23:10:55.663558 systemd[1]: Listening on sshd.socket. Jul 14 23:10:55.663716 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:10:55.663976 systemd[1]: Listening on docker.socket. Jul 14 23:10:55.664104 systemd[1]: Reached target sockets.target. Jul 14 23:10:55.664193 systemd[1]: Reached target basic.target. Jul 14 23:10:55.664302 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 23:10:55.664319 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 14 23:10:55.665026 systemd[1]: Starting containerd.service... Jul 14 23:10:55.665854 systemd[1]: Starting dbus.service... Jul 14 23:10:55.666953 systemd[1]: Starting enable-oem-cloudinit.service... Jul 14 23:10:55.668046 systemd[1]: Starting extend-filesystems.service... Jul 14 23:10:55.668825 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 14 23:10:55.668976 jq[1231]: false Jul 14 23:10:55.670114 systemd[1]: Starting motdgen.service... Jul 14 23:10:55.672744 systemd[1]: Starting prepare-helm.service... Jul 14 23:10:55.674566 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 14 23:10:55.678346 systemd[1]: Starting sshd-keygen.service... Jul 14 23:10:55.680046 systemd[1]: Starting systemd-logind.service... Jul 14 23:10:55.680161 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 14 23:10:55.680206 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 14 23:10:55.680634 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 14 23:10:55.681002 systemd[1]: Starting update-engine.service... Jul 14 23:10:55.681813 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 14 23:10:55.682782 systemd[1]: Starting vmtoolsd.service... Jul 14 23:10:55.691466 jq[1246]: true Jul 14 23:10:55.684347 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 14 23:10:55.684485 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 14 23:10:55.692368 systemd[1]: Started vmtoolsd.service. Jul 14 23:10:55.699335 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 14 23:10:55.699448 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 14 23:10:55.699849 jq[1258]: true Jul 14 23:10:55.704782 tar[1249]: linux-amd64/helm Jul 14 23:10:55.709791 extend-filesystems[1232]: Found loop1 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda1 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda2 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda3 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found usr Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda4 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda6 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda7 Jul 14 23:10:55.709791 extend-filesystems[1232]: Found sda9 Jul 14 23:10:55.709791 extend-filesystems[1232]: Checking size of /dev/sda9 Jul 14 23:10:55.716894 systemd[1]: motdgen.service: Deactivated successfully. Jul 14 23:10:55.717002 systemd[1]: Finished motdgen.service. Jul 14 23:10:55.730606 extend-filesystems[1232]: Old size kept for /dev/sda9 Jul 14 23:10:55.731483 extend-filesystems[1232]: Found sr0 Jul 14 23:10:55.731894 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 14 23:10:55.732053 systemd[1]: Finished extend-filesystems.service. Jul 14 23:10:55.759897 env[1250]: time="2025-07-14T23:10:55.759860721Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 14 23:10:55.793516 env[1250]: time="2025-07-14T23:10:55.793491466Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 14 23:10:55.794741 env[1250]: time="2025-07-14T23:10:55.794729523Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:55.799586 env[1250]: time="2025-07-14T23:10:55.799509800Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.187-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:10:55.799586 env[1250]: time="2025-07-14T23:10:55.799527599Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800680 env[1250]: time="2025-07-14T23:10:55.800665835Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800720 env[1250]: time="2025-07-14T23:10:55.800680237Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800720 env[1250]: time="2025-07-14T23:10:55.800688998Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 14 23:10:55.800720 env[1250]: time="2025-07-14T23:10:55.800694916Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800773 env[1250]: time="2025-07-14T23:10:55.800739668Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800875 env[1250]: time="2025-07-14T23:10:55.800862893Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800950 env[1250]: time="2025-07-14T23:10:55.800933049Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 14 23:10:55.800950 env[1250]: time="2025-07-14T23:10:55.800944047Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 14 23:10:55.801003 env[1250]: time="2025-07-14T23:10:55.800971133Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 14 23:10:55.801003 env[1250]: time="2025-07-14T23:10:55.800978772Z" level=info msg="metadata content store policy set" policy=shared Jul 14 23:10:55.808316 env[1250]: time="2025-07-14T23:10:55.808299561Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 14 23:10:55.808364 env[1250]: time="2025-07-14T23:10:55.808317994Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 14 23:10:55.808364 env[1250]: time="2025-07-14T23:10:55.808326135Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 14 23:10:55.808364 env[1250]: time="2025-07-14T23:10:55.808343754Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808364 env[1250]: time="2025-07-14T23:10:55.808352228Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808364 env[1250]: time="2025-07-14T23:10:55.808360215Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808367951Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808377640Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808386166Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808393586Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808400315Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808406862Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 14 23:10:55.808489 env[1250]: time="2025-07-14T23:10:55.808476840Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 14 23:10:55.808607 env[1250]: time="2025-07-14T23:10:55.808521755Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 14 23:10:55.808689 env[1250]: time="2025-07-14T23:10:55.808670795Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 14 23:10:55.808716 env[1250]: time="2025-07-14T23:10:55.808695000Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.808716 env[1250]: time="2025-07-14T23:10:55.808706906Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 14 23:10:55.808787 env[1250]: time="2025-07-14T23:10:55.808751481Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.808787 env[1250]: time="2025-07-14T23:10:55.808763931Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.808787 env[1250]: time="2025-07-14T23:10:55.808771784Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.808787 env[1250]: time="2025-07-14T23:10:55.808779300Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.808787 env[1250]: time="2025-07-14T23:10:55.808786561Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808793175Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808799758Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808806092Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808813606Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808895254Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808904684Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808911528Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808917730Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808925463Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808931329Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808941180Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 14 23:10:55.809341 env[1250]: time="2025-07-14T23:10:55.808965598Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 14 23:10:55.821328 kernel: NET: Registered PF_VSOCK protocol family Jul 14 23:10:55.817395 dbus-daemon[1230]: [system] SELinux support is enabled Jul 14 23:10:55.811282 systemd-logind[1242]: Watching system buttons on /dev/input/event1 (Power Button) Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.809083365Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.809225454Z" level=info msg="Connect containerd service" Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.809249654Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.822776987Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.822930308Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.822953664Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 14 23:10:55.824363 env[1250]: time="2025-07-14T23:10:55.824083743Z" level=info msg="containerd successfully booted in 0.065367s" Jul 14 23:10:55.811295 systemd-logind[1242]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 14 23:10:55.829990 bash[1284]: Updated "/home/core/.ssh/authorized_keys" Jul 14 23:10:55.812037 systemd-logind[1242]: New seat seat0. Jul 14 23:10:55.817480 systemd[1]: Started dbus.service. Jul 14 23:10:55.818742 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 14 23:10:55.818757 systemd[1]: Reached target system-config.target. Jul 14 23:10:55.818868 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 14 23:10:55.818877 systemd[1]: Reached target user-config.target. Jul 14 23:10:55.820543 systemd[1]: Started systemd-logind.service. Jul 14 23:10:55.830323 update_engine[1244]: I0714 23:10:55.829499 1244 main.cc:92] Flatcar Update Engine starting Jul 14 23:10:55.823001 systemd[1]: Started containerd.service. Jul 14 23:10:55.825580 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 14 23:10:55.831818 env[1250]: time="2025-07-14T23:10:55.831335035Z" level=info msg="Start subscribing containerd event" Jul 14 23:10:55.831818 env[1250]: time="2025-07-14T23:10:55.831385470Z" level=info msg="Start recovering state" Jul 14 23:10:55.831818 env[1250]: time="2025-07-14T23:10:55.831677227Z" level=info msg="Start event monitor" Jul 14 23:10:55.831818 env[1250]: time="2025-07-14T23:10:55.831687453Z" level=info msg="Start snapshots syncer" Jul 14 23:10:55.831818 env[1250]: time="2025-07-14T23:10:55.831693806Z" level=info msg="Start cni network conf syncer for default" Jul 14 23:10:55.831818 env[1250]: time="2025-07-14T23:10:55.831698929Z" level=info msg="Start streaming server" Jul 14 23:10:55.832033 systemd[1]: Started update-engine.service. Jul 14 23:10:55.833604 systemd[1]: Started locksmithd.service. Jul 14 23:10:55.834193 update_engine[1244]: I0714 23:10:55.834173 1244 update_check_scheduler.cc:74] Next update check in 10m33s Jul 14 23:10:55.872745 systemd-networkd[1061]: ens192: Gained IPv6LL Jul 14 23:10:55.874023 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 14 23:10:55.874338 systemd[1]: Reached target network-online.target. Jul 14 23:10:55.875644 systemd[1]: Starting kubelet.service... Jul 14 23:10:56.191713 tar[1249]: linux-amd64/LICENSE Jul 14 23:10:56.191853 tar[1249]: linux-amd64/README.md Jul 14 23:10:56.195384 systemd[1]: Finished prepare-helm.service. Jul 14 23:10:56.342797 locksmithd[1292]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 14 23:10:56.489877 sshd_keygen[1256]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 14 23:10:56.504398 systemd[1]: Finished sshd-keygen.service. Jul 14 23:10:56.505575 systemd[1]: Starting issuegen.service... Jul 14 23:10:56.509156 systemd[1]: issuegen.service: Deactivated successfully. Jul 14 23:10:56.509246 systemd[1]: Finished issuegen.service. Jul 14 23:10:56.510319 systemd[1]: Starting systemd-user-sessions.service... Jul 14 23:10:56.514400 systemd[1]: Finished systemd-user-sessions.service. Jul 14 23:10:56.515334 systemd[1]: Started getty@tty1.service. Jul 14 23:10:56.516132 systemd[1]: Started serial-getty@ttyS0.service. Jul 14 23:10:56.516527 systemd[1]: Reached target getty.target. Jul 14 23:10:57.266529 systemd[1]: Started kubelet.service. Jul 14 23:10:57.266890 systemd[1]: Reached target multi-user.target. Jul 14 23:10:57.267961 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 14 23:10:57.274871 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 14 23:10:57.274969 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 14 23:10:57.275144 systemd[1]: Startup finished in 963ms (kernel) + 4.585s (initrd) + 6.310s (userspace) = 11.859s. Jul 14 23:10:57.309451 login[1359]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 14 23:10:57.309537 login[1358]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 14 23:10:57.318516 systemd[1]: Created slice user-500.slice. Jul 14 23:10:57.319377 systemd[1]: Starting user-runtime-dir@500.service... Jul 14 23:10:57.324628 systemd-logind[1242]: New session 1 of user core. Jul 14 23:10:57.326689 systemd-logind[1242]: New session 2 of user core. Jul 14 23:10:57.329520 systemd[1]: Finished user-runtime-dir@500.service. Jul 14 23:10:57.330620 systemd[1]: Starting user@500.service... Jul 14 23:10:57.333538 (systemd)[1365]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:10:57.381916 systemd[1365]: Queued start job for default target default.target. Jul 14 23:10:57.382467 systemd[1365]: Reached target paths.target. Jul 14 23:10:57.382565 systemd[1365]: Reached target sockets.target. Jul 14 23:10:57.382631 systemd[1365]: Reached target timers.target. Jul 14 23:10:57.382691 systemd[1365]: Reached target basic.target. Jul 14 23:10:57.382794 systemd[1]: Started user@500.service. Jul 14 23:10:57.383549 systemd[1]: Started session-1.scope. Jul 14 23:10:57.384052 systemd[1]: Started session-2.scope. Jul 14 23:10:57.384823 systemd[1365]: Reached target default.target. Jul 14 23:10:57.384960 systemd[1365]: Startup finished in 47ms. Jul 14 23:10:58.088271 kubelet[1362]: E0714 23:10:58.088245 1362 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:10:58.089354 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:10:58.089439 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:08.282069 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 14 23:11:08.282235 systemd[1]: Stopped kubelet.service. Jul 14 23:11:08.283408 systemd[1]: Starting kubelet.service... Jul 14 23:11:08.599886 systemd[1]: Started kubelet.service. Jul 14 23:11:08.691802 kubelet[1394]: E0714 23:11:08.691763 1394 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:08.694398 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:08.694510 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:18.782132 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 14 23:11:18.782297 systemd[1]: Stopped kubelet.service. Jul 14 23:11:18.783520 systemd[1]: Starting kubelet.service... Jul 14 23:11:18.997574 systemd[1]: Started kubelet.service. Jul 14 23:11:19.030345 kubelet[1403]: E0714 23:11:19.030308 1403 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:19.031505 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:19.031583 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:25.875931 systemd[1]: Created slice system-sshd.slice. Jul 14 23:11:25.876963 systemd[1]: Started sshd@0-139.178.70.103:22-139.178.89.65:39820.service. Jul 14 23:11:25.917712 sshd[1409]: Accepted publickey for core from 139.178.89.65 port 39820 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:25.918595 sshd[1409]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:25.922269 systemd[1]: Started session-3.scope. Jul 14 23:11:25.922662 systemd-logind[1242]: New session 3 of user core. Jul 14 23:11:25.971735 systemd[1]: Started sshd@1-139.178.70.103:22-139.178.89.65:39832.service. Jul 14 23:11:26.002835 sshd[1414]: Accepted publickey for core from 139.178.89.65 port 39832 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.004118 sshd[1414]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.007261 systemd[1]: Started session-4.scope. Jul 14 23:11:26.007842 systemd-logind[1242]: New session 4 of user core. Jul 14 23:11:26.058617 sshd[1414]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.061250 systemd[1]: Started sshd@2-139.178.70.103:22-139.178.89.65:39848.service. Jul 14 23:11:26.063685 systemd[1]: sshd@1-139.178.70.103:22-139.178.89.65:39832.service: Deactivated successfully. Jul 14 23:11:26.064173 systemd[1]: session-4.scope: Deactivated successfully. Jul 14 23:11:26.064971 systemd-logind[1242]: Session 4 logged out. Waiting for processes to exit. Jul 14 23:11:26.065552 systemd-logind[1242]: Removed session 4. Jul 14 23:11:26.093082 sshd[1419]: Accepted publickey for core from 139.178.89.65 port 39848 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.094132 sshd[1419]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.097624 systemd[1]: Started session-5.scope. Jul 14 23:11:26.098202 systemd-logind[1242]: New session 5 of user core. Jul 14 23:11:26.148691 systemd[1]: sshd@2-139.178.70.103:22-139.178.89.65:39848.service: Deactivated successfully. Jul 14 23:11:26.146678 sshd[1419]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.149012 systemd[1]: session-5.scope: Deactivated successfully. Jul 14 23:11:26.149629 systemd-logind[1242]: Session 5 logged out. Waiting for processes to exit. Jul 14 23:11:26.150262 systemd[1]: Started sshd@3-139.178.70.103:22-139.178.89.65:39860.service. Jul 14 23:11:26.150943 systemd-logind[1242]: Removed session 5. Jul 14 23:11:26.178163 sshd[1426]: Accepted publickey for core from 139.178.89.65 port 39860 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.179283 sshd[1426]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.182367 systemd-logind[1242]: New session 6 of user core. Jul 14 23:11:26.182916 systemd[1]: Started session-6.scope. Jul 14 23:11:26.234729 sshd[1426]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.237145 systemd[1]: sshd@3-139.178.70.103:22-139.178.89.65:39860.service: Deactivated successfully. Jul 14 23:11:26.237580 systemd[1]: session-6.scope: Deactivated successfully. Jul 14 23:11:26.238133 systemd-logind[1242]: Session 6 logged out. Waiting for processes to exit. Jul 14 23:11:26.238918 systemd[1]: Started sshd@4-139.178.70.103:22-139.178.89.65:39866.service. Jul 14 23:11:26.241514 systemd-logind[1242]: Removed session 6. Jul 14 23:11:26.269105 sshd[1432]: Accepted publickey for core from 139.178.89.65 port 39866 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.270151 sshd[1432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.273357 systemd[1]: Started session-7.scope. Jul 14 23:11:26.274206 systemd-logind[1242]: New session 7 of user core. Jul 14 23:11:26.335624 sudo[1435]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 14 23:11:26.335799 sudo[1435]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.343604 dbus-daemon[1230]: Ѝ\xe7\xc5{U: received setenforce notice (enforcing=1173150656) Jul 14 23:11:26.344853 sudo[1435]: pam_unix(sudo:session): session closed for user root Jul 14 23:11:26.347382 sshd[1432]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.349467 systemd[1]: Started sshd@5-139.178.70.103:22-139.178.89.65:39868.service. Jul 14 23:11:26.350884 systemd[1]: sshd@4-139.178.70.103:22-139.178.89.65:39866.service: Deactivated successfully. Jul 14 23:11:26.351442 systemd[1]: session-7.scope: Deactivated successfully. Jul 14 23:11:26.352726 systemd-logind[1242]: Session 7 logged out. Waiting for processes to exit. Jul 14 23:11:26.353320 systemd-logind[1242]: Removed session 7. Jul 14 23:11:26.380871 sshd[1438]: Accepted publickey for core from 139.178.89.65 port 39868 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.381991 sshd[1438]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.385025 systemd-logind[1242]: New session 8 of user core. Jul 14 23:11:26.385563 systemd[1]: Started session-8.scope. Jul 14 23:11:26.436906 sudo[1443]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 14 23:11:26.438406 sudo[1443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.440529 sudo[1443]: pam_unix(sudo:session): session closed for user root Jul 14 23:11:26.444050 sudo[1442]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 14 23:11:26.444218 sudo[1442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.451065 systemd[1]: Stopping audit-rules.service... Jul 14 23:11:26.450000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 23:11:26.450000 audit[1446]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe7bca2370 a2=420 a3=0 items=0 ppid=1 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.454778 auditctl[1446]: No rules Jul 14 23:11:26.459292 kernel: audit: type=1305 audit(1752534686.450:218): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 14 23:11:26.459342 kernel: audit: type=1300 audit(1752534686.450:218): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffe7bca2370 a2=420 a3=0 items=0 ppid=1 pid=1446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.455081 systemd[1]: audit-rules.service: Deactivated successfully. Jul 14 23:11:26.455203 systemd[1]: Stopped audit-rules.service. Jul 14 23:11:26.450000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 14 23:11:26.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.459696 systemd[1]: Starting audit-rules.service... Jul 14 23:11:26.464553 kernel: audit: type=1327 audit(1752534686.450:218): proctitle=2F7362696E2F617564697463746C002D44 Jul 14 23:11:26.464588 kernel: audit: type=1131 audit(1752534686.453:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.474209 augenrules[1463]: No rules Jul 14 23:11:26.474737 systemd[1]: Finished audit-rules.service. Jul 14 23:11:26.473000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.475135 sudo[1442]: pam_unix(sudo:session): session closed for user root Jul 14 23:11:26.478072 sshd[1438]: pam_unix(sshd:session): session closed for user core Jul 14 23:11:26.473000 audit[1442]: USER_END pid=1442 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.480991 kernel: audit: type=1130 audit(1752534686.473:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.481035 kernel: audit: type=1106 audit(1752534686.473:221): pid=1442 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.473000 audit[1442]: CRED_DISP pid=1442 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.483715 kernel: audit: type=1104 audit(1752534686.473:222): pid=1442 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.483740 kernel: audit: type=1130 audit(1752534686.482:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.103:22-139.178.89.65:39884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.482000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.103:22-139.178.89.65:39884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.483545 systemd[1]: Started sshd@6-139.178.70.103:22-139.178.89.65:39884.service. Jul 14 23:11:26.485000 audit[1438]: USER_END pid=1438 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.487246 systemd[1]: sshd@5-139.178.70.103:22-139.178.89.65:39868.service: Deactivated successfully. Jul 14 23:11:26.487687 systemd[1]: session-8.scope: Deactivated successfully. Jul 14 23:11:26.490676 kernel: audit: type=1106 audit(1752534686.485:224): pid=1438 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.485000 audit[1438]: CRED_DISP pid=1438 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.490899 systemd-logind[1242]: Session 8 logged out. Waiting for processes to exit. Jul 14 23:11:26.491452 systemd-logind[1242]: Removed session 8. Jul 14 23:11:26.493574 kernel: audit: type=1104 audit(1752534686.485:225): pid=1438 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.485000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-139.178.70.103:22-139.178.89.65:39868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.513000 audit[1468]: USER_ACCT pid=1468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.515277 sshd[1468]: Accepted publickey for core from 139.178.89.65 port 39884 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:11:26.514000 audit[1468]: CRED_ACQ pid=1468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.514000 audit[1468]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1c9673e0 a2=3 a3=0 items=0 ppid=1 pid=1468 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.514000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:11:26.516020 sshd[1468]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:11:26.518775 systemd[1]: Started session-9.scope. Jul 14 23:11:26.518980 systemd-logind[1242]: New session 9 of user core. Jul 14 23:11:26.520000 audit[1468]: USER_START pid=1468 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.521000 audit[1471]: CRED_ACQ pid=1471 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:11:26.567000 audit[1472]: USER_ACCT pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.567000 audit[1472]: CRED_REFR pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.568624 sudo[1472]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 14 23:11:26.568808 sudo[1472]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 14 23:11:26.568000 audit[1472]: USER_START pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.588485 systemd[1]: Starting docker.service... Jul 14 23:11:26.610638 env[1482]: time="2025-07-14T23:11:26.610613597Z" level=info msg="Starting up" Jul 14 23:11:26.611500 env[1482]: time="2025-07-14T23:11:26.611485331Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 23:11:26.611500 env[1482]: time="2025-07-14T23:11:26.611497159Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 23:11:26.611551 env[1482]: time="2025-07-14T23:11:26.611508687Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 23:11:26.611551 env[1482]: time="2025-07-14T23:11:26.611514507Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 23:11:26.612332 env[1482]: time="2025-07-14T23:11:26.612317917Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 14 23:11:26.612363 env[1482]: time="2025-07-14T23:11:26.612330330Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 14 23:11:26.612363 env[1482]: time="2025-07-14T23:11:26.612340025Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 14 23:11:26.612363 env[1482]: time="2025-07-14T23:11:26.612345119Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 14 23:11:26.616366 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport2647231762-merged.mount: Deactivated successfully. Jul 14 23:11:26.628799 env[1482]: time="2025-07-14T23:11:26.628779301Z" level=info msg="Loading containers: start." Jul 14 23:11:26.671000 audit[1513]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1513 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.671000 audit[1513]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffdf16966a0 a2=0 a3=7ffdf169668c items=0 ppid=1482 pid=1513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.671000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 14 23:11:26.672000 audit[1515]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1515 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.672000 audit[1515]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffd0785cc20 a2=0 a3=7ffd0785cc0c items=0 ppid=1482 pid=1515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.672000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 14 23:11:26.673000 audit[1517]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.673000 audit[1517]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffebb2b8450 a2=0 a3=7ffebb2b843c items=0 ppid=1482 pid=1517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.673000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 23:11:26.674000 audit[1519]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1519 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.674000 audit[1519]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff477f9d90 a2=0 a3=7fff477f9d7c items=0 ppid=1482 pid=1519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.674000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 23:11:26.676000 audit[1521]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1521 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.676000 audit[1521]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd94d6fe70 a2=0 a3=7ffd94d6fe5c items=0 ppid=1482 pid=1521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.676000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 14 23:11:26.693000 audit[1526]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1526 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.693000 audit[1526]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd7b7589d0 a2=0 a3=7ffd7b7589bc items=0 ppid=1482 pid=1526 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.693000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 14 23:11:26.696000 audit[1528]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1528 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.696000 audit[1528]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0401a6e0 a2=0 a3=7fff0401a6cc items=0 ppid=1482 pid=1528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.696000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 14 23:11:26.697000 audit[1530]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1530 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.697000 audit[1530]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe1dc88ec0 a2=0 a3=7ffe1dc88eac items=0 ppid=1482 pid=1530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.697000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 14 23:11:26.698000 audit[1532]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1532 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.698000 audit[1532]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7fffb12580e0 a2=0 a3=7fffb12580cc items=0 ppid=1482 pid=1532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.698000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.702000 audit[1536]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1536 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.702000 audit[1536]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7fff940bf6a0 a2=0 a3=7fff940bf68c items=0 ppid=1482 pid=1536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.702000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.707000 audit[1537]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1537 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.707000 audit[1537]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff5d074b80 a2=0 a3=7fff5d074b6c items=0 ppid=1482 pid=1537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.707000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.716445 kernel: Initializing XFRM netlink socket Jul 14 23:11:26.738432 env[1482]: time="2025-07-14T23:11:26.738401184Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 14 23:11:26.750000 audit[1545]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1545 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.750000 audit[1545]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffc211dfef0 a2=0 a3=7ffc211dfedc items=0 ppid=1482 pid=1545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.750000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 14 23:11:26.759000 audit[1548]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1548 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.759000 audit[1548]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd4c741920 a2=0 a3=7ffd4c74190c items=0 ppid=1482 pid=1548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.759000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 14 23:11:26.761000 audit[1551]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1551 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.761000 audit[1551]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fff7290be00 a2=0 a3=7fff7290bdec items=0 ppid=1482 pid=1551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.761000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 14 23:11:26.762000 audit[1553]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1553 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.762000 audit[1553]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffca8c4d9e0 a2=0 a3=7ffca8c4d9cc items=0 ppid=1482 pid=1553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.762000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 14 23:11:26.763000 audit[1555]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1555 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.763000 audit[1555]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffeb8d64440 a2=0 a3=7ffeb8d6442c items=0 ppid=1482 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.763000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 14 23:11:26.765000 audit[1557]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1557 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.765000 audit[1557]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffd08f5f670 a2=0 a3=7ffd08f5f65c items=0 ppid=1482 pid=1557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.765000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 14 23:11:26.766000 audit[1559]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1559 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.766000 audit[1559]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffe2bfd71a0 a2=0 a3=7ffe2bfd718c items=0 ppid=1482 pid=1559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.766000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 14 23:11:26.772000 audit[1562]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1562 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.772000 audit[1562]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffcc81d8a60 a2=0 a3=7ffcc81d8a4c items=0 ppid=1482 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.772000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 14 23:11:26.773000 audit[1564]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1564 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.773000 audit[1564]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffccf5beab0 a2=0 a3=7ffccf5bea9c items=0 ppid=1482 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.773000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 14 23:11:26.774000 audit[1566]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1566 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.774000 audit[1566]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdae9d4280 a2=0 a3=7ffdae9d426c items=0 ppid=1482 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.774000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 14 23:11:26.775000 audit[1568]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1568 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.775000 audit[1568]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffe34683b00 a2=0 a3=7ffe34683aec items=0 ppid=1482 pid=1568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.775000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 14 23:11:26.777724 systemd-networkd[1061]: docker0: Link UP Jul 14 23:11:26.780000 audit[1572]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1572 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.780000 audit[1572]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcc25fdda0 a2=0 a3=7ffcc25fdd8c items=0 ppid=1482 pid=1572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.780000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.785000 audit[1573]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1573 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:26.785000 audit[1573]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd1822a3d0 a2=0 a3=7ffd1822a3bc items=0 ppid=1482 pid=1573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:26.785000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 14 23:11:26.787372 env[1482]: time="2025-07-14T23:11:26.787357354Z" level=info msg="Loading containers: done." Jul 14 23:11:26.794385 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2794194679-merged.mount: Deactivated successfully. Jul 14 23:11:26.804199 env[1482]: time="2025-07-14T23:11:26.804180062Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 14 23:11:26.804430 env[1482]: time="2025-07-14T23:11:26.804406125Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 14 23:11:26.804524 env[1482]: time="2025-07-14T23:11:26.804515901Z" level=info msg="Daemon has completed initialization" Jul 14 23:11:26.810339 systemd[1]: Started docker.service. Jul 14 23:11:26.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:26.815041 env[1482]: time="2025-07-14T23:11:26.815014671Z" level=info msg="API listen on /run/docker.sock" Jul 14 23:11:27.599234 env[1250]: time="2025-07-14T23:11:27.599212035Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 14 23:11:28.119739 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1954995775.mount: Deactivated successfully. Jul 14 23:11:29.281995 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 14 23:11:29.280000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:29.280000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:29.282155 systemd[1]: Stopped kubelet.service. Jul 14 23:11:29.283732 systemd[1]: Starting kubelet.service... Jul 14 23:11:29.354433 systemd[1]: Started kubelet.service. Jul 14 23:11:29.353000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:29.436086 kubelet[1610]: E0714 23:11:29.436051 1610 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:29.436963 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:29.437040 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:29.435000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:29.880342 env[1250]: time="2025-07-14T23:11:29.880301685Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.908289 env[1250]: time="2025-07-14T23:11:29.908240000Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.936806 env[1250]: time="2025-07-14T23:11:29.936774651Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.942923 env[1250]: time="2025-07-14T23:11:29.942898913Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:29.943409 env[1250]: time="2025-07-14T23:11:29.943392189Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 14 23:11:29.943846 env[1250]: time="2025-07-14T23:11:29.943813732Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 14 23:11:32.173370 env[1250]: time="2025-07-14T23:11:32.173323188Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:32.286240 env[1250]: time="2025-07-14T23:11:32.286207827Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:32.296369 env[1250]: time="2025-07-14T23:11:32.296340684Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:32.308820 env[1250]: time="2025-07-14T23:11:32.308792819Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:32.309461 env[1250]: time="2025-07-14T23:11:32.309441622Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 14 23:11:32.309794 env[1250]: time="2025-07-14T23:11:32.309776414Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 14 23:11:33.813128 env[1250]: time="2025-07-14T23:11:33.813098876Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.813877 env[1250]: time="2025-07-14T23:11:33.813862880Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.814849 env[1250]: time="2025-07-14T23:11:33.814833558Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.815812 env[1250]: time="2025-07-14T23:11:33.815799190Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:33.816281 env[1250]: time="2025-07-14T23:11:33.816266084Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 14 23:11:33.816598 env[1250]: time="2025-07-14T23:11:33.816586158Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 14 23:11:34.935724 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount680103159.mount: Deactivated successfully. Jul 14 23:11:35.952094 env[1250]: time="2025-07-14T23:11:35.952061811Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.956976 env[1250]: time="2025-07-14T23:11:35.956953688Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.961633 env[1250]: time="2025-07-14T23:11:35.961614887Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.964699 env[1250]: time="2025-07-14T23:11:35.964675725Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:35.965072 env[1250]: time="2025-07-14T23:11:35.965051951Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 14 23:11:35.965736 env[1250]: time="2025-07-14T23:11:35.965710682Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 14 23:11:36.675645 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2522358020.mount: Deactivated successfully. Jul 14 23:11:38.425201 env[1250]: time="2025-07-14T23:11:38.425168660Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.469578 env[1250]: time="2025-07-14T23:11:38.469550915Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.483309 env[1250]: time="2025-07-14T23:11:38.483273172Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.493675 env[1250]: time="2025-07-14T23:11:38.493652592Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:38.494313 env[1250]: time="2025-07-14T23:11:38.494285816Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 14 23:11:38.494651 env[1250]: time="2025-07-14T23:11:38.494638826Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 14 23:11:39.131879 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount483340005.mount: Deactivated successfully. Jul 14 23:11:39.163024 env[1250]: time="2025-07-14T23:11:39.162985108Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:39.164012 env[1250]: time="2025-07-14T23:11:39.163990437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:39.165733 env[1250]: time="2025-07-14T23:11:39.165716197Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:39.166981 env[1250]: time="2025-07-14T23:11:39.166962751Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:39.167583 env[1250]: time="2025-07-14T23:11:39.167544910Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 14 23:11:39.168136 env[1250]: time="2025-07-14T23:11:39.168084885Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 14 23:11:39.531973 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 14 23:11:39.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:39.532092 systemd[1]: Stopped kubelet.service. Jul 14 23:11:39.533088 systemd[1]: Starting kubelet.service... Jul 14 23:11:39.540943 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 14 23:11:39.540984 kernel: audit: type=1130 audit(1752534699.530:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:39.530000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:39.545939 kernel: audit: type=1131 audit(1752534699.530:265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:40.119676 systemd[1]: Started kubelet.service. Jul 14 23:11:40.118000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:40.123483 kernel: audit: type=1130 audit(1752534700.118:266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:40.153771 kubelet[1621]: E0714 23:11:40.153738 1621 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 14 23:11:40.154744 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 14 23:11:40.154825 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 14 23:11:40.153000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:40.158485 kernel: audit: type=1131 audit(1752534700.153:267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:41.427757 update_engine[1244]: I0714 23:11:41.427520 1244 update_attempter.cc:509] Updating boot flags... Jul 14 23:11:41.480947 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1595725062.mount: Deactivated successfully. Jul 14 23:11:45.270348 env[1250]: time="2025-07-14T23:11:45.270299131Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:45.279463 env[1250]: time="2025-07-14T23:11:45.279436751Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:45.283837 env[1250]: time="2025-07-14T23:11:45.283818576Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:45.289007 env[1250]: time="2025-07-14T23:11:45.288982075Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:45.289849 env[1250]: time="2025-07-14T23:11:45.289825327Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 14 23:11:47.346625 systemd[1]: Stopped kubelet.service. Jul 14 23:11:47.345000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:47.349729 kernel: audit: type=1130 audit(1752534707.345:268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:47.349591 systemd[1]: Starting kubelet.service... Jul 14 23:11:47.346000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:47.353448 kernel: audit: type=1131 audit(1752534707.346:269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:47.367567 systemd[1]: Reloading. Jul 14 23:11:47.413588 /usr/lib/systemd/system-generators/torcx-generator[1688]: time="2025-07-14T23:11:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:11:47.413612 /usr/lib/systemd/system-generators/torcx-generator[1688]: time="2025-07-14T23:11:47Z" level=info msg="torcx already run" Jul 14 23:11:47.488914 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:11:47.489031 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:11:47.500774 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.546795 kernel: audit: type=1400 audit(1752534707.540:270): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.546828 kernel: audit: type=1400 audit(1752534707.540:271): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.546844 kernel: audit: type=1400 audit(1752534707.540:272): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.554431 kernel: audit: type=1400 audit(1752534707.540:273): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.554480 kernel: audit: type=1400 audit(1752534707.540:274): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.554497 kernel: audit: type=1400 audit(1752534707.540:275): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.559144 kernel: audit: type=1400 audit(1752534707.540:276): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.559174 kernel: audit: type=1400 audit(1752534707.540:277): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.540000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.547000 audit: BPF prog-id=46 op=LOAD Jul 14 23:11:47.547000 audit: BPF prog-id=39 op=UNLOAD Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.550000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.550000 audit: BPF prog-id=47 op=LOAD Jul 14 23:11:47.550000 audit: BPF prog-id=30 op=UNLOAD Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.551000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit: BPF prog-id=48 op=LOAD Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.557000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.560000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.560000 audit: BPF prog-id=49 op=LOAD Jul 14 23:11:47.560000 audit: BPF prog-id=31 op=UNLOAD Jul 14 23:11:47.560000 audit: BPF prog-id=32 op=UNLOAD Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit: BPF prog-id=50 op=LOAD Jul 14 23:11:47.561000 audit: BPF prog-id=44 op=UNLOAD Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit: BPF prog-id=51 op=LOAD Jul 14 23:11:47.561000 audit: BPF prog-id=41 op=UNLOAD Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit: BPF prog-id=52 op=LOAD Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.561000 audit: BPF prog-id=53 op=LOAD Jul 14 23:11:47.561000 audit: BPF prog-id=42 op=UNLOAD Jul 14 23:11:47.561000 audit: BPF prog-id=43 op=UNLOAD Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit: BPF prog-id=54 op=LOAD Jul 14 23:11:47.562000 audit: BPF prog-id=40 op=UNLOAD Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit: BPF prog-id=55 op=LOAD Jul 14 23:11:47.562000 audit: BPF prog-id=33 op=UNLOAD Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit: BPF prog-id=56 op=LOAD Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.562000 audit: BPF prog-id=57 op=LOAD Jul 14 23:11:47.562000 audit: BPF prog-id=34 op=UNLOAD Jul 14 23:11:47.562000 audit: BPF prog-id=35 op=UNLOAD Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit: BPF prog-id=58 op=LOAD Jul 14 23:11:47.563000 audit: BPF prog-id=36 op=UNLOAD Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit: BPF prog-id=59 op=LOAD Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:47.563000 audit: BPF prog-id=60 op=LOAD Jul 14 23:11:47.563000 audit: BPF prog-id=37 op=UNLOAD Jul 14 23:11:47.563000 audit: BPF prog-id=38 op=UNLOAD Jul 14 23:11:47.600557 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 14 23:11:47.600631 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 14 23:11:47.600809 systemd[1]: Stopped kubelet.service. Jul 14 23:11:47.599000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 14 23:11:47.602062 systemd[1]: Starting kubelet.service... Jul 14 23:11:49.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:49.682699 systemd[1]: Started kubelet.service. Jul 14 23:11:49.981935 kubelet[1752]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:49.982167 kubelet[1752]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 14 23:11:49.982167 kubelet[1752]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:49.982240 kubelet[1752]: I0714 23:11:49.982190 1752 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 23:11:50.259345 kubelet[1752]: I0714 23:11:50.259280 1752 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 14 23:11:50.259345 kubelet[1752]: I0714 23:11:50.259299 1752 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 23:11:50.259698 kubelet[1752]: I0714 23:11:50.259685 1752 server.go:934] "Client rotation is on, will bootstrap in background" Jul 14 23:11:50.831220 kubelet[1752]: E0714 23:11:50.831188 1752 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.103:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:50.836253 kubelet[1752]: I0714 23:11:50.836225 1752 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:11:50.854365 kubelet[1752]: E0714 23:11:50.854341 1752 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 23:11:50.854501 kubelet[1752]: I0714 23:11:50.854490 1752 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 23:11:50.861838 kubelet[1752]: I0714 23:11:50.861826 1752 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 23:11:50.867244 kubelet[1752]: I0714 23:11:50.867227 1752 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 14 23:11:50.867436 kubelet[1752]: I0714 23:11:50.867405 1752 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 23:11:50.867686 kubelet[1752]: I0714 23:11:50.867508 1752 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 23:11:50.867797 kubelet[1752]: I0714 23:11:50.867788 1752 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 23:11:50.867842 kubelet[1752]: I0714 23:11:50.867835 1752 container_manager_linux.go:300] "Creating device plugin manager" Jul 14 23:11:50.867952 kubelet[1752]: I0714 23:11:50.867944 1752 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:50.894206 kubelet[1752]: I0714 23:11:50.894183 1752 kubelet.go:408] "Attempting to sync node with API server" Jul 14 23:11:50.894436 kubelet[1752]: I0714 23:11:50.894426 1752 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 23:11:50.894574 kubelet[1752]: I0714 23:11:50.894562 1752 kubelet.go:314] "Adding apiserver pod source" Jul 14 23:11:50.894704 kubelet[1752]: I0714 23:11:50.894663 1752 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 23:11:50.916792 kubelet[1752]: W0714 23:11:50.916744 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:50.916939 kubelet[1752]: E0714 23:11:50.916797 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:50.921744 kubelet[1752]: W0714 23:11:50.921708 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.103:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:50.921861 kubelet[1752]: E0714 23:11:50.921845 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.103:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:50.922270 kubelet[1752]: I0714 23:11:50.922259 1752 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 23:11:50.922693 kubelet[1752]: I0714 23:11:50.922681 1752 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 23:11:50.922793 kubelet[1752]: W0714 23:11:50.922784 1752 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 14 23:11:50.942712 kubelet[1752]: I0714 23:11:50.942696 1752 server.go:1274] "Started kubelet" Jul 14 23:11:50.991712 kubelet[1752]: E0714 23:11:50.985302 1752 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.103:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.103:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18524108c647ae8a default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-14 23:11:50.94267457 +0000 UTC m=+1.256223430,LastTimestamp:2025-07-14 23:11:50.94267457 +0000 UTC m=+1.256223430,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 14 23:11:51.040676 kubelet[1752]: I0714 23:11:51.040626 1752 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 23:11:51.040951 kubelet[1752]: I0714 23:11:51.040935 1752 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 23:11:51.040000 audit[1752]: AVC avc: denied { mac_admin } for pid=1752 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:51.040000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:51.040000 audit[1752]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a39e60 a1=c000a29b48 a2=c000a39e30 a3=25 items=0 ppid=1 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.040000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:51.040000 audit[1752]: AVC avc: denied { mac_admin } for pid=1752 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:51.040000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:51.040000 audit[1752]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a4d8e0 a1=c000a29b60 a2=c000a39ef0 a3=25 items=0 ppid=1 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.040000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:51.042056 kubelet[1752]: I0714 23:11:51.041686 1752 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 23:11:51.042056 kubelet[1752]: I0714 23:11:51.041725 1752 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 14 23:11:51.042056 kubelet[1752]: I0714 23:11:51.041771 1752 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 23:11:51.042000 audit[1763]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1763 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.042000 audit[1763]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffcb5ed99f0 a2=0 a3=7ffcb5ed99dc items=0 ppid=1752 pid=1763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.042000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 23:11:51.043000 audit[1764]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1764 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.043000 audit[1764]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd40161170 a2=0 a3=7ffd4016115c items=0 ppid=1752 pid=1764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.043000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 23:11:51.046199 kubelet[1752]: I0714 23:11:51.046170 1752 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 23:11:51.046843 kubelet[1752]: I0714 23:11:51.046827 1752 server.go:449] "Adding debug handlers to kubelet server" Jul 14 23:11:51.051039 kubelet[1752]: E0714 23:11:51.051025 1752 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 23:11:51.051274 kubelet[1752]: I0714 23:11:51.051146 1752 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 23:11:51.051824 kubelet[1752]: E0714 23:11:51.051807 1752 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 14 23:11:51.051897 kubelet[1752]: I0714 23:11:51.051888 1752 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 14 23:11:51.052096 kubelet[1752]: I0714 23:11:51.052087 1752 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 14 23:11:51.052171 kubelet[1752]: I0714 23:11:51.052164 1752 reconciler.go:26] "Reconciler: start to sync state" Jul 14 23:11:51.052572 kubelet[1752]: I0714 23:11:51.052563 1752 factory.go:221] Registration of the systemd container factory successfully Jul 14 23:11:51.052662 kubelet[1752]: I0714 23:11:51.052652 1752 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 23:11:51.052910 kubelet[1752]: W0714 23:11:51.052891 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:51.052977 kubelet[1752]: E0714 23:11:51.052963 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:51.053550 kubelet[1752]: I0714 23:11:51.053541 1752 factory.go:221] Registration of the containerd container factory successfully Jul 14 23:11:51.052000 audit[1766]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1766 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.052000 audit[1766]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffd871a7f0 a2=0 a3=7fffd871a7dc items=0 ppid=1752 pid=1766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.052000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:11:51.053000 audit[1768]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1768 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.053000 audit[1768]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffef028330 a2=0 a3=7fffef02831c items=0 ppid=1752 pid=1768 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.053000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:11:51.056903 kubelet[1752]: E0714 23:11:51.056880 1752 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.103:6443: connect: connection refused" interval="200ms" Jul 14 23:11:51.076386 kubelet[1752]: I0714 23:11:51.076364 1752 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 14 23:11:51.076386 kubelet[1752]: I0714 23:11:51.076378 1752 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 14 23:11:51.076386 kubelet[1752]: I0714 23:11:51.076390 1752 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:51.090391 kubelet[1752]: I0714 23:11:51.090331 1752 policy_none.go:49] "None policy: Start" Jul 14 23:11:51.091295 kubelet[1752]: I0714 23:11:51.091285 1752 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 14 23:11:51.091444 kubelet[1752]: I0714 23:11:51.091436 1752 state_mem.go:35] "Initializing new in-memory state store" Jul 14 23:11:51.104000 audit[1774]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.104000 audit[1774]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffd835a0370 a2=0 a3=7ffd835a035c items=0 ppid=1752 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.104000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 14 23:11:51.105000 audit[1776]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:51.105000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff9ad37140 a2=0 a3=7fff9ad3712c items=0 ppid=1752 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.105000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 14 23:11:51.106928 kubelet[1752]: I0714 23:11:51.106167 1752 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 23:11:51.106928 kubelet[1752]: I0714 23:11:51.106832 1752 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 23:11:51.106928 kubelet[1752]: I0714 23:11:51.106844 1752 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 14 23:11:51.106928 kubelet[1752]: I0714 23:11:51.106856 1752 kubelet.go:2321] "Starting kubelet main sync loop" Jul 14 23:11:51.106928 kubelet[1752]: E0714 23:11:51.106882 1752 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 23:11:51.106000 audit[1777]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.106000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffd44ac10b0 a2=0 a3=7ffd44ac109c items=0 ppid=1752 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.106000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 23:11:51.106000 audit[1778]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1778 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.106000 audit[1778]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec6ad9330 a2=0 a3=7ffec6ad931c items=0 ppid=1752 pid=1778 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.106000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 23:11:51.107000 audit[1779]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1779 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:11:51.107000 audit[1779]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff32c79900 a2=0 a3=7fff32c798ec items=0 ppid=1752 pid=1779 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.107000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 23:11:51.108000 audit[1780]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1780 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:51.108000 audit[1780]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe5fdfa450 a2=0 a3=7ffe5fdfa43c items=0 ppid=1752 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.108000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 14 23:11:51.109000 audit[1781]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1781 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:51.109000 audit[1781]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffda69a31a0 a2=0 a3=7ffda69a318c items=0 ppid=1752 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.109000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 14 23:11:51.110000 audit[1782]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1782 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:11:51.110000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe179cb5d0 a2=0 a3=7ffe179cb5bc items=0 ppid=1752 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.110000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 14 23:11:51.112533 kubelet[1752]: W0714 23:11:51.112351 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:51.112533 kubelet[1752]: E0714 23:11:51.112376 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:51.115464 systemd[1]: Created slice kubepods.slice. Jul 14 23:11:51.118113 systemd[1]: Created slice kubepods-burstable.slice. Jul 14 23:11:51.120110 systemd[1]: Created slice kubepods-besteffort.slice. Jul 14 23:11:51.124883 kubelet[1752]: I0714 23:11:51.124866 1752 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 23:11:51.123000 audit[1752]: AVC avc: denied { mac_admin } for pid=1752 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:51.123000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:51.123000 audit[1752]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e5e570 a1=c000e64198 a2=c000e5e540 a3=25 items=0 ppid=1 pid=1752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:51.123000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:51.125042 kubelet[1752]: I0714 23:11:51.124912 1752 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 23:11:51.125042 kubelet[1752]: I0714 23:11:51.124978 1752 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 23:11:51.125042 kubelet[1752]: I0714 23:11:51.124984 1752 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 23:11:51.129387 kubelet[1752]: I0714 23:11:51.129363 1752 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 23:11:51.130964 kubelet[1752]: E0714 23:11:51.130772 1752 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 14 23:11:51.213498 systemd[1]: Created slice kubepods-burstable-podae75233e4ec4a26ca4f121d42c4b20ba.slice. Jul 14 23:11:51.217602 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 14 23:11:51.226778 kubelet[1752]: I0714 23:11:51.226753 1752 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 23:11:51.226994 kubelet[1752]: E0714 23:11:51.226975 1752 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.103:6443/api/v1/nodes\": dial tcp 139.178.70.103:6443: connect: connection refused" node="localhost" Jul 14 23:11:51.229331 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 14 23:11:51.253408 kubelet[1752]: I0714 23:11:51.253370 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:51.253408 kubelet[1752]: I0714 23:11:51.253397 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:51.253554 kubelet[1752]: I0714 23:11:51.253450 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:51.253554 kubelet[1752]: I0714 23:11:51.253462 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ae75233e4ec4a26ca4f121d42c4b20ba-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"ae75233e4ec4a26ca4f121d42c4b20ba\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:51.253554 kubelet[1752]: I0714 23:11:51.253473 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:51.253554 kubelet[1752]: I0714 23:11:51.253502 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:51.253554 kubelet[1752]: I0714 23:11:51.253513 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:51.253648 kubelet[1752]: I0714 23:11:51.253521 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ae75233e4ec4a26ca4f121d42c4b20ba-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"ae75233e4ec4a26ca4f121d42c4b20ba\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:51.253648 kubelet[1752]: I0714 23:11:51.253528 1752 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ae75233e4ec4a26ca4f121d42c4b20ba-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"ae75233e4ec4a26ca4f121d42c4b20ba\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:51.257643 kubelet[1752]: E0714 23:11:51.257621 1752 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.103:6443: connect: connection refused" interval="400ms" Jul 14 23:11:51.428575 kubelet[1752]: I0714 23:11:51.428492 1752 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 23:11:51.429661 kubelet[1752]: E0714 23:11:51.429621 1752 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.103:6443/api/v1/nodes\": dial tcp 139.178.70.103:6443: connect: connection refused" node="localhost" Jul 14 23:11:51.525064 env[1250]: time="2025-07-14T23:11:51.524894696Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 14 23:11:51.525454 env[1250]: time="2025-07-14T23:11:51.525392997Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:ae75233e4ec4a26ca4f121d42c4b20ba,Namespace:kube-system,Attempt:0,}" Jul 14 23:11:51.531876 env[1250]: time="2025-07-14T23:11:51.531854222Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 14 23:11:51.657977 kubelet[1752]: E0714 23:11:51.657955 1752 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.103:6443: connect: connection refused" interval="800ms" Jul 14 23:11:51.831604 kubelet[1752]: I0714 23:11:51.831584 1752 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 23:11:51.832037 kubelet[1752]: E0714 23:11:51.832021 1752 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.103:6443/api/v1/nodes\": dial tcp 139.178.70.103:6443: connect: connection refused" node="localhost" Jul 14 23:11:51.884921 kubelet[1752]: W0714 23:11:51.884871 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:51.885080 kubelet[1752]: E0714 23:11:51.885065 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:52.277462 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount914136062.mount: Deactivated successfully. Jul 14 23:11:52.362740 env[1250]: time="2025-07-14T23:11:52.362708981Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.363801 env[1250]: time="2025-07-14T23:11:52.363742134Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.366061 env[1250]: time="2025-07-14T23:11:52.366044361Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.367121 env[1250]: time="2025-07-14T23:11:52.367107030Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.369709 env[1250]: time="2025-07-14T23:11:52.369691225Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.372122 env[1250]: time="2025-07-14T23:11:52.372103906Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.373211 env[1250]: time="2025-07-14T23:11:52.373197120Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.374756 env[1250]: time="2025-07-14T23:11:52.374740267Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.375460 env[1250]: time="2025-07-14T23:11:52.375446898Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.375990 env[1250]: time="2025-07-14T23:11:52.375973446Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.376587 env[1250]: time="2025-07-14T23:11:52.376574121Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.380447 env[1250]: time="2025-07-14T23:11:52.380404699Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:11:52.394157 kubelet[1752]: W0714 23:11:52.394079 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:52.394157 kubelet[1752]: E0714 23:11:52.394136 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.103:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:52.400249 env[1250]: time="2025-07-14T23:11:52.394491086Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:11:52.400249 env[1250]: time="2025-07-14T23:11:52.394525966Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:11:52.400249 env[1250]: time="2025-07-14T23:11:52.394550388Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:11:52.400249 env[1250]: time="2025-07-14T23:11:52.394644501Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4 pid=1798 runtime=io.containerd.runc.v2 Jul 14 23:11:52.400457 env[1250]: time="2025-07-14T23:11:52.397764129Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:11:52.400457 env[1250]: time="2025-07-14T23:11:52.397788702Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:11:52.400457 env[1250]: time="2025-07-14T23:11:52.397795597Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:11:52.400457 env[1250]: time="2025-07-14T23:11:52.397941896Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0347dcbb9fe4d2ef7d78a94fe0f4f7387654e8ec870b416498af8f4caee9f6b2 pid=1806 runtime=io.containerd.runc.v2 Jul 14 23:11:52.411676 systemd[1]: Started cri-containerd-b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4.scope. Jul 14 23:11:52.415446 kubelet[1752]: W0714 23:11:52.415365 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.103:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:52.415446 kubelet[1752]: E0714 23:11:52.415421 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.103:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:52.424592 systemd[1]: Started cri-containerd-0347dcbb9fe4d2ef7d78a94fe0f4f7387654e8ec870b416498af8f4caee9f6b2.scope. Jul 14 23:11:52.433070 kernel: kauditd_printk_skb: 214 callbacks suppressed Jul 14 23:11:52.433146 kernel: audit: type=1400 audit(1752534712.428:459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.433177 kernel: audit: type=1400 audit(1752534712.428:460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.437986 kernel: audit: type=1400 audit(1752534712.428:461): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438021 kernel: audit: type=1400 audit(1752534712.428:462): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.443033 kernel: audit: type=1400 audit(1752534712.428:463): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.443078 kernel: audit: type=1400 audit(1752534712.428:464): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.443140 kubelet[1752]: W0714 23:11:52.442969 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:52.443140 kubelet[1752]: E0714 23:11:52.443018 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.103:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.447650 kernel: audit: type=1400 audit(1752534712.428:465): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.450512 kernel: audit: type=1400 audit(1752534712.428:466): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.431000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.455836 kernel: audit: type=1400 audit(1752534712.428:467): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.455873 kernel: audit: type=1400 audit(1752534712.431:468): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.431000 audit: BPF prog-id=61 op=LOAD Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1798 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231323834623663313966663936313361623332303832333861626335 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1798 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231323834623663313966663936313361623332303832333861626335 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.432000 audit: BPF prog-id=62 op=LOAD Jul 14 23:11:52.432000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000220d40 items=0 ppid=1798 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.432000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231323834623663313966663936313361623332303832333861626335 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit: BPF prog-id=63 op=LOAD Jul 14 23:11:52.438000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000220d88 items=0 ppid=1798 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231323834623663313966663936313361623332303832333861626335 Jul 14 23:11:52.438000 audit: BPF prog-id=63 op=UNLOAD Jul 14 23:11:52.438000 audit: BPF prog-id=62 op=UNLOAD Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { perfmon } for pid=1818 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit[1818]: AVC avc: denied { bpf } for pid=1818 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.438000 audit: BPF prog-id=64 op=LOAD Jul 14 23:11:52.438000 audit[1818]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000221198 items=0 ppid=1798 pid=1818 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.459319 kubelet[1752]: E0714 23:11:52.459287 1752 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.103:6443: connect: connection refused" interval="1.6s" Jul 14 23:11:52.438000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6231323834623663313966663936313361623332303832333861626335 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit: BPF prog-id=65 op=LOAD Jul 14 23:11:52.454000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.454000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1806 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.454000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033343764636262396665346432656637643738613934666530663466 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1806 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033343764636262396665346432656637643738613934666530663466 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.456000 audit: BPF prog-id=66 op=LOAD Jul 14 23:11:52.456000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003cc6f0 items=0 ppid=1806 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.456000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033343764636262396665346432656637643738613934666530663466 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit: BPF prog-id=67 op=LOAD Jul 14 23:11:52.459000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003cc738 items=0 ppid=1806 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033343764636262396665346432656637643738613934666530663466 Jul 14 23:11:52.459000 audit: BPF prog-id=67 op=UNLOAD Jul 14 23:11:52.459000 audit: BPF prog-id=66 op=UNLOAD Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { perfmon } for pid=1825 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit[1825]: AVC avc: denied { bpf } for pid=1825 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.459000 audit: BPF prog-id=68 op=LOAD Jul 14 23:11:52.459000 audit[1825]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ccb48 items=0 ppid=1806 pid=1825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.459000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3033343764636262396665346432656637643738613934666530663466 Jul 14 23:11:52.469176 env[1250]: time="2025-07-14T23:11:52.469140744Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:11:52.469243 env[1250]: time="2025-07-14T23:11:52.469164761Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:11:52.469243 env[1250]: time="2025-07-14T23:11:52.469184094Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:11:52.469311 env[1250]: time="2025-07-14T23:11:52.469291138Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/216cb19c08c07e17743138db30ec65dac1024f390f6c1bb3dbc4f59924b00d23 pid=1858 runtime=io.containerd.runc.v2 Jul 14 23:11:52.479962 systemd[1]: Started cri-containerd-216cb19c08c07e17743138db30ec65dac1024f390f6c1bb3dbc4f59924b00d23.scope. Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit: BPF prog-id=69 op=LOAD Jul 14 23:11:52.494000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.494000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1858 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.494000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231366362313963303863303765313737343331333864623330656336 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1858 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231366362313963303863303765313737343331333864623330656336 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.495000 audit: BPF prog-id=70 op=LOAD Jul 14 23:11:52.495000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000389040 items=0 ppid=1858 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.495000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231366362313963303863303765313737343331333864623330656336 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit: BPF prog-id=71 op=LOAD Jul 14 23:11:52.496000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000389088 items=0 ppid=1858 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231366362313963303863303765313737343331333864623330656336 Jul 14 23:11:52.496000 audit: BPF prog-id=71 op=UNLOAD Jul 14 23:11:52.496000 audit: BPF prog-id=70 op=UNLOAD Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { perfmon } for pid=1866 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit[1866]: AVC avc: denied { bpf } for pid=1866 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.496000 audit: BPF prog-id=72 op=LOAD Jul 14 23:11:52.496000 audit[1866]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000389498 items=0 ppid=1858 pid=1866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.496000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3231366362313963303863303765313737343331333864623330656336 Jul 14 23:11:52.502779 env[1250]: time="2025-07-14T23:11:52.502748741Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4\"" Jul 14 23:11:52.508256 env[1250]: time="2025-07-14T23:11:52.508236525Z" level=info msg="CreateContainer within sandbox \"b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 14 23:11:52.512563 env[1250]: time="2025-07-14T23:11:52.512547561Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"0347dcbb9fe4d2ef7d78a94fe0f4f7387654e8ec870b416498af8f4caee9f6b2\"" Jul 14 23:11:52.514536 env[1250]: time="2025-07-14T23:11:52.514521889Z" level=info msg="CreateContainer within sandbox \"0347dcbb9fe4d2ef7d78a94fe0f4f7387654e8ec870b416498af8f4caee9f6b2\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 14 23:11:52.521939 env[1250]: time="2025-07-14T23:11:52.521918693Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:ae75233e4ec4a26ca4f121d42c4b20ba,Namespace:kube-system,Attempt:0,} returns sandbox id \"216cb19c08c07e17743138db30ec65dac1024f390f6c1bb3dbc4f59924b00d23\"" Jul 14 23:11:52.523206 env[1250]: time="2025-07-14T23:11:52.523192611Z" level=info msg="CreateContainer within sandbox \"216cb19c08c07e17743138db30ec65dac1024f390f6c1bb3dbc4f59924b00d23\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 14 23:11:52.633934 kubelet[1752]: I0714 23:11:52.633721 1752 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 23:11:52.636545 kubelet[1752]: E0714 23:11:52.633972 1752 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.103:6443/api/v1/nodes\": dial tcp 139.178.70.103:6443: connect: connection refused" node="localhost" Jul 14 23:11:52.698255 env[1250]: time="2025-07-14T23:11:52.698220269Z" level=info msg="CreateContainer within sandbox \"0347dcbb9fe4d2ef7d78a94fe0f4f7387654e8ec870b416498af8f4caee9f6b2\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"f53390b0ef2b2d1b073ba90ff62cefcd35aa2d2bbbe59c69dce43aaae97539bf\"" Jul 14 23:11:52.699157 env[1250]: time="2025-07-14T23:11:52.699133387Z" level=info msg="StartContainer for \"f53390b0ef2b2d1b073ba90ff62cefcd35aa2d2bbbe59c69dce43aaae97539bf\"" Jul 14 23:11:52.715061 systemd[1]: Started cri-containerd-f53390b0ef2b2d1b073ba90ff62cefcd35aa2d2bbbe59c69dce43aaae97539bf.scope. Jul 14 23:11:52.725107 env[1250]: time="2025-07-14T23:11:52.725070629Z" level=info msg="CreateContainer within sandbox \"b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0\"" Jul 14 23:11:52.725561 env[1250]: time="2025-07-14T23:11:52.725539979Z" level=info msg="StartContainer for \"ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0\"" Jul 14 23:11:52.727873 env[1250]: time="2025-07-14T23:11:52.727848492Z" level=info msg="CreateContainer within sandbox \"216cb19c08c07e17743138db30ec65dac1024f390f6c1bb3dbc4f59924b00d23\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"076636df1472fbe1a98099e9be88662e35b681d91ca3b60978a0a1d5f4a3248b\"" Jul 14 23:11:52.728138 env[1250]: time="2025-07-14T23:11:52.728114247Z" level=info msg="StartContainer for \"076636df1472fbe1a98099e9be88662e35b681d91ca3b60978a0a1d5f4a3248b\"" Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.733000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit: BPF prog-id=73 op=LOAD Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1806 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333339306230656632623264316230373362613930666636326365 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1806 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333339306230656632623264316230373362613930666636326365 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit: BPF prog-id=74 op=LOAD Jul 14 23:11:52.734000 audit[1917]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000302c50 items=0 ppid=1806 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333339306230656632623264316230373362613930666636326365 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit: BPF prog-id=75 op=LOAD Jul 14 23:11:52.734000 audit[1917]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000302c98 items=0 ppid=1806 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333339306230656632623264316230373362613930666636326365 Jul 14 23:11:52.734000 audit: BPF prog-id=75 op=UNLOAD Jul 14 23:11:52.734000 audit: BPF prog-id=74 op=UNLOAD Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { perfmon } for pid=1917 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit[1917]: AVC avc: denied { bpf } for pid=1917 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.734000 audit: BPF prog-id=76 op=LOAD Jul 14 23:11:52.734000 audit[1917]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003030a8 items=0 ppid=1806 pid=1917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.734000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6635333339306230656632623264316230373362613930666636326365 Jul 14 23:11:52.742924 systemd[1]: Started cri-containerd-076636df1472fbe1a98099e9be88662e35b681d91ca3b60978a0a1d5f4a3248b.scope. Jul 14 23:11:52.749010 systemd[1]: Started cri-containerd-ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0.scope. Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit: BPF prog-id=77 op=LOAD Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1858 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037363633366466313437326662653161393830393965396265383836 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1858 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037363633366466313437326662653161393830393965396265383836 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit: BPF prog-id=78 op=LOAD Jul 14 23:11:52.760000 audit[1948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002e7d10 items=0 ppid=1858 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037363633366466313437326662653161393830393965396265383836 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit: BPF prog-id=79 op=LOAD Jul 14 23:11:52.760000 audit[1948]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002e7d58 items=0 ppid=1858 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037363633366466313437326662653161393830393965396265383836 Jul 14 23:11:52.760000 audit: BPF prog-id=79 op=UNLOAD Jul 14 23:11:52.760000 audit: BPF prog-id=78 op=UNLOAD Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { perfmon } for pid=1948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit[1948]: AVC avc: denied { bpf } for pid=1948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.760000 audit: BPF prog-id=80 op=LOAD Jul 14 23:11:52.760000 audit[1948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00036c168 items=0 ppid=1858 pid=1948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3037363633366466313437326662653161393830393965396265383836 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit: BPF prog-id=81 op=LOAD Jul 14 23:11:52.775000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.775000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1798 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.775000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666306538663462363930633935623065623866383837356634303338 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1798 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666306538663462363930633935623065623866383837356634303338 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit: BPF prog-id=82 op=LOAD Jul 14 23:11:52.776000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00030ed10 items=0 ppid=1798 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666306538663462363930633935623065623866383837356634303338 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit: BPF prog-id=83 op=LOAD Jul 14 23:11:52.776000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00030ed58 items=0 ppid=1798 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666306538663462363930633935623065623866383837356634303338 Jul 14 23:11:52.776000 audit: BPF prog-id=83 op=UNLOAD Jul 14 23:11:52.776000 audit: BPF prog-id=82 op=UNLOAD Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { perfmon } for pid=1947 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit[1947]: AVC avc: denied { bpf } for pid=1947 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:52.776000 audit: BPF prog-id=84 op=LOAD Jul 14 23:11:52.776000 audit[1947]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00030f168 items=0 ppid=1798 pid=1947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:52.776000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6666306538663462363930633935623065623866383837356634303338 Jul 14 23:11:52.795574 env[1250]: time="2025-07-14T23:11:52.795542136Z" level=info msg="StartContainer for \"f53390b0ef2b2d1b073ba90ff62cefcd35aa2d2bbbe59c69dce43aaae97539bf\" returns successfully" Jul 14 23:11:52.827969 env[1250]: time="2025-07-14T23:11:52.827937135Z" level=info msg="StartContainer for \"ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0\" returns successfully" Jul 14 23:11:52.834994 env[1250]: time="2025-07-14T23:11:52.834976122Z" level=info msg="StartContainer for \"076636df1472fbe1a98099e9be88662e35b681d91ca3b60978a0a1d5f4a3248b\" returns successfully" Jul 14 23:11:52.939556 kubelet[1752]: E0714 23:11:52.939477 1752 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.103:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:53.906630 kubelet[1752]: W0714 23:11:53.906582 1752 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.103:6443: connect: connection refused Jul 14 23:11:53.906630 kubelet[1752]: E0714 23:11:53.906611 1752 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.103:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.103:6443: connect: connection refused" logger="UnhandledError" Jul 14 23:11:54.060279 kubelet[1752]: E0714 23:11:54.060239 1752 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.103:6443: connect: connection refused" interval="3.2s" Jul 14 23:11:54.158000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.158000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000059e30 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:54.158000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:54.159000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.159000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00039d6e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:54.159000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:54.235404 kubelet[1752]: I0714 23:11:54.235387 1752 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 23:11:54.892000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.892000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c003569b90 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:11:54.892000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:54.892000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.892000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0084f4680 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:11:54.892000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:54.893000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.893000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0035c0840 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:11:54.893000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:54.899000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.899000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=57 a1=c003569e60 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:11:54.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:54.936000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.936000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=90 a1=c004262400 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:11:54.936000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:54.936000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:54.936000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=90 a1=c003e93e90 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:11:54.936000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:11:55.075584 kubelet[1752]: I0714 23:11:55.075558 1752 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 14 23:11:55.151070 kubelet[1752]: E0714 23:11:55.150998 1752 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:55.923700 kubelet[1752]: I0714 23:11:55.923656 1752 apiserver.go:52] "Watching apiserver" Jul 14 23:11:55.952255 kubelet[1752]: I0714 23:11:55.952233 1752 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 14 23:11:56.616328 systemd[1]: Reloading. Jul 14 23:11:56.694140 /usr/lib/systemd/system-generators/torcx-generator[2041]: time="2025-07-14T23:11:56Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.101 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.101 /var/lib/torcx/store]" Jul 14 23:11:56.694395 /usr/lib/systemd/system-generators/torcx-generator[2041]: time="2025-07-14T23:11:56Z" level=info msg="torcx already run" Jul 14 23:11:56.751873 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 14 23:11:56.751887 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 14 23:11:56.763787 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.812000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.813000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.813000 audit: BPF prog-id=85 op=LOAD Jul 14 23:11:56.813000 audit: BPF prog-id=46 op=UNLOAD Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.814000 audit: BPF prog-id=86 op=LOAD Jul 14 23:11:56.814000 audit: BPF prog-id=81 op=UNLOAD Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.815000 audit: BPF prog-id=87 op=LOAD Jul 14 23:11:56.815000 audit: BPF prog-id=47 op=UNLOAD Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.816000 audit: BPF prog-id=88 op=LOAD Jul 14 23:11:56.816000 audit: BPF prog-id=73 op=UNLOAD Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.817000 audit: BPF prog-id=89 op=LOAD Jul 14 23:11:56.817000 audit: BPF prog-id=65 op=UNLOAD Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit: BPF prog-id=90 op=LOAD Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.818000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.819000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.819000 audit: BPF prog-id=91 op=LOAD Jul 14 23:11:56.819000 audit: BPF prog-id=48 op=UNLOAD Jul 14 23:11:56.819000 audit: BPF prog-id=49 op=UNLOAD Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.820000 audit: BPF prog-id=92 op=LOAD Jul 14 23:11:56.820000 audit: BPF prog-id=61 op=UNLOAD Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.821000 audit: BPF prog-id=93 op=LOAD Jul 14 23:11:56.821000 audit: BPF prog-id=50 op=UNLOAD Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.822000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit: BPF prog-id=94 op=LOAD Jul 14 23:11:56.823000 audit: BPF prog-id=51 op=UNLOAD Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit: BPF prog-id=95 op=LOAD Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.823000 audit: BPF prog-id=96 op=LOAD Jul 14 23:11:56.824000 audit: BPF prog-id=52 op=UNLOAD Jul 14 23:11:56.824000 audit: BPF prog-id=53 op=UNLOAD Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.824000 audit: BPF prog-id=97 op=LOAD Jul 14 23:11:56.824000 audit: BPF prog-id=69 op=UNLOAD Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit: BPF prog-id=98 op=LOAD Jul 14 23:11:56.825000 audit: BPF prog-id=54 op=UNLOAD Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.825000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit: BPF prog-id=99 op=LOAD Jul 14 23:11:56.826000 audit: BPF prog-id=55 op=UNLOAD Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit: BPF prog-id=100 op=LOAD Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.826000 audit: BPF prog-id=101 op=LOAD Jul 14 23:11:56.827000 audit: BPF prog-id=56 op=UNLOAD Jul 14 23:11:56.827000 audit: BPF prog-id=57 op=UNLOAD Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.827000 audit: BPF prog-id=102 op=LOAD Jul 14 23:11:56.827000 audit: BPF prog-id=77 op=UNLOAD Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit: BPF prog-id=103 op=LOAD Jul 14 23:11:56.828000 audit: BPF prog-id=58 op=UNLOAD Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.828000 audit: BPF prog-id=104 op=LOAD Jul 14 23:11:56.828000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:56.829000 audit: BPF prog-id=105 op=LOAD Jul 14 23:11:56.829000 audit: BPF prog-id=59 op=UNLOAD Jul 14 23:11:56.829000 audit: BPF prog-id=60 op=UNLOAD Jul 14 23:11:56.839373 kubelet[1752]: I0714 23:11:56.839333 1752 dynamic_cafile_content.go:174] "Shutting down controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:11:56.839780 systemd[1]: Stopping kubelet.service... Jul 14 23:11:56.861907 systemd[1]: kubelet.service: Deactivated successfully. Jul 14 23:11:56.862023 systemd[1]: Stopped kubelet.service. Jul 14 23:11:56.860000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:56.863269 systemd[1]: Starting kubelet.service... Jul 14 23:11:57.537439 kernel: kauditd_printk_skb: 601 callbacks suppressed Jul 14 23:11:57.537516 kernel: audit: type=1400 audit(1752534717.534:820): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.534000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.534000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.543054 kernel: audit: type=1400 audit(1752534717.534:821): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.543137 kernel: audit: type=1300 audit(1752534717.534:821): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a944e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.534000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a944e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.546953 kernel: audit: type=1327 audit(1752534717.534:821): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.534000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.534000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.553407 kernel: audit: type=1400 audit(1752534717.534:822): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.553489 kernel: audit: type=1300 audit(1752534717.534:822): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a94520 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.534000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a94520 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.534000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.560200 kernel: audit: type=1327 audit(1752534717.534:822): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.563166 kernel: audit: type=1400 audit(1752534717.534:823): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.534000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:11:57.534000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a94560 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.567139 kernel: audit: type=1300 audit(1752534717.534:823): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a94560 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.567174 kernel: audit: type=1327 audit(1752534717.534:823): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.534000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.534000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0009d68e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:11:57.534000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:11:57.765321 systemd[1]: Started kubelet.service. Jul 14 23:11:57.765000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:11:57.826136 kubelet[2104]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:57.826136 kubelet[2104]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 14 23:11:57.826136 kubelet[2104]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 14 23:11:57.826136 kubelet[2104]: I0714 23:11:57.819834 2104 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 14 23:11:57.826136 kubelet[2104]: I0714 23:11:57.823718 2104 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 14 23:11:57.826136 kubelet[2104]: I0714 23:11:57.823727 2104 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 14 23:11:57.826136 kubelet[2104]: I0714 23:11:57.823836 2104 server.go:934] "Client rotation is on, will bootstrap in background" Jul 14 23:11:57.827549 kubelet[2104]: I0714 23:11:57.827538 2104 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 14 23:11:57.828996 kubelet[2104]: I0714 23:11:57.828987 2104 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 14 23:11:57.832784 kubelet[2104]: E0714 23:11:57.832762 2104 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 14 23:11:57.832784 kubelet[2104]: I0714 23:11:57.832781 2104 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 14 23:11:57.837921 kubelet[2104]: I0714 23:11:57.837906 2104 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 14 23:11:57.838070 kubelet[2104]: I0714 23:11:57.838063 2104 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 14 23:11:57.838190 kubelet[2104]: I0714 23:11:57.838171 2104 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 14 23:11:57.838382 kubelet[2104]: I0714 23:11:57.838231 2104 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 14 23:11:57.838500 kubelet[2104]: I0714 23:11:57.838491 2104 topology_manager.go:138] "Creating topology manager with none policy" Jul 14 23:11:57.838551 kubelet[2104]: I0714 23:11:57.838543 2104 container_manager_linux.go:300] "Creating device plugin manager" Jul 14 23:11:57.838612 kubelet[2104]: I0714 23:11:57.838603 2104 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:57.838714 kubelet[2104]: I0714 23:11:57.838708 2104 kubelet.go:408] "Attempting to sync node with API server" Jul 14 23:11:57.838761 kubelet[2104]: I0714 23:11:57.838753 2104 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 14 23:11:57.838821 kubelet[2104]: I0714 23:11:57.838814 2104 kubelet.go:314] "Adding apiserver pod source" Jul 14 23:11:57.838866 kubelet[2104]: I0714 23:11:57.838859 2104 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 14 23:11:57.847015 kubelet[2104]: I0714 23:11:57.846991 2104 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 14 23:11:57.847327 kubelet[2104]: I0714 23:11:57.847318 2104 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 14 23:11:57.847605 kubelet[2104]: I0714 23:11:57.847594 2104 server.go:1274] "Started kubelet" Jul 14 23:11:57.847000 audit[2104]: AVC avc: denied { mac_admin } for pid=2104 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.847000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:57.847000 audit[2104]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00047e5d0 a1=c000a8c9a8 a2=c00047e480 a3=25 items=0 ppid=1 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:57.847000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:57.849538 kubelet[2104]: I0714 23:11:57.849525 2104 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 14 23:11:57.849604 kubelet[2104]: I0714 23:11:57.849594 2104 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 14 23:11:57.849666 kubelet[2104]: I0714 23:11:57.849659 2104 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 14 23:11:57.848000 audit[2104]: AVC avc: denied { mac_admin } for pid=2104 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.848000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:57.848000 audit[2104]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000161c20 a1=c000a8c9c0 a2=c00047e9f0 a3=25 items=0 ppid=1 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:57.848000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:57.867855 kubelet[2104]: E0714 23:11:57.867836 2104 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 14 23:11:57.870950 kubelet[2104]: I0714 23:11:57.870926 2104 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 14 23:11:57.871539 kubelet[2104]: I0714 23:11:57.871530 2104 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 14 23:11:57.872209 kubelet[2104]: I0714 23:11:57.872200 2104 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 14 23:11:57.872610 kubelet[2104]: I0714 23:11:57.872602 2104 reconciler.go:26] "Reconciler: start to sync state" Jul 14 23:11:57.873583 kubelet[2104]: I0714 23:11:57.873567 2104 server.go:449] "Adding debug handlers to kubelet server" Jul 14 23:11:57.874174 kubelet[2104]: I0714 23:11:57.874157 2104 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 14 23:11:57.874312 kubelet[2104]: I0714 23:11:57.874305 2104 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 14 23:11:57.874486 kubelet[2104]: I0714 23:11:57.874478 2104 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 14 23:11:57.876339 kubelet[2104]: I0714 23:11:57.876327 2104 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 14 23:11:57.876962 kubelet[2104]: I0714 23:11:57.876953 2104 factory.go:221] Registration of the systemd container factory successfully Jul 14 23:11:57.877073 kubelet[2104]: I0714 23:11:57.877062 2104 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 14 23:11:57.877980 kubelet[2104]: I0714 23:11:57.877971 2104 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 14 23:11:57.878032 kubelet[2104]: I0714 23:11:57.878025 2104 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 14 23:11:57.878089 kubelet[2104]: I0714 23:11:57.878081 2104 kubelet.go:2321] "Starting kubelet main sync loop" Jul 14 23:11:57.878164 kubelet[2104]: E0714 23:11:57.878154 2104 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 14 23:11:57.890792 kubelet[2104]: I0714 23:11:57.890777 2104 factory.go:221] Registration of the containerd container factory successfully Jul 14 23:11:57.933771 kubelet[2104]: I0714 23:11:57.933751 2104 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 14 23:11:57.933771 kubelet[2104]: I0714 23:11:57.933765 2104 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 14 23:11:57.933771 kubelet[2104]: I0714 23:11:57.933776 2104 state_mem.go:36] "Initialized new in-memory state store" Jul 14 23:11:57.933949 kubelet[2104]: I0714 23:11:57.933872 2104 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 14 23:11:57.933949 kubelet[2104]: I0714 23:11:57.933885 2104 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 14 23:11:57.933949 kubelet[2104]: I0714 23:11:57.933897 2104 policy_none.go:49] "None policy: Start" Jul 14 23:11:57.934320 kubelet[2104]: I0714 23:11:57.934312 2104 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 14 23:11:57.934380 kubelet[2104]: I0714 23:11:57.934374 2104 state_mem.go:35] "Initializing new in-memory state store" Jul 14 23:11:57.934527 kubelet[2104]: I0714 23:11:57.934520 2104 state_mem.go:75] "Updated machine memory state" Jul 14 23:11:57.937439 kubelet[2104]: I0714 23:11:57.937411 2104 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 14 23:11:57.936000 audit[2104]: AVC avc: denied { mac_admin } for pid=2104 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:11:57.936000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 14 23:11:57.936000 audit[2104]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c0005cb0e0 a1=c000d72660 a2=c0005cb0b0 a3=25 items=0 ppid=1 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:11:57.936000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 14 23:11:57.937671 kubelet[2104]: I0714 23:11:57.937467 2104 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 14 23:11:57.937671 kubelet[2104]: I0714 23:11:57.937547 2104 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 14 23:11:57.937671 kubelet[2104]: I0714 23:11:57.937553 2104 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 14 23:11:57.938428 kubelet[2104]: I0714 23:11:57.937971 2104 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 14 23:11:58.047232 kubelet[2104]: I0714 23:11:58.047208 2104 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 14 23:11:58.125351 kubelet[2104]: I0714 23:11:58.125255 2104 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 14 23:11:58.125351 kubelet[2104]: I0714 23:11:58.125317 2104 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 14 23:11:58.223659 kubelet[2104]: I0714 23:11:58.223165 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.223659 kubelet[2104]: I0714 23:11:58.223193 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.223659 kubelet[2104]: I0714 23:11:58.223206 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 14 23:11:58.223659 kubelet[2104]: I0714 23:11:58.223215 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/ae75233e4ec4a26ca4f121d42c4b20ba-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"ae75233e4ec4a26ca4f121d42c4b20ba\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:58.223659 kubelet[2104]: I0714 23:11:58.223226 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.223852 kubelet[2104]: I0714 23:11:58.223235 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.223852 kubelet[2104]: I0714 23:11:58.223246 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 14 23:11:58.223852 kubelet[2104]: I0714 23:11:58.223263 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/ae75233e4ec4a26ca4f121d42c4b20ba-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"ae75233e4ec4a26ca4f121d42c4b20ba\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:58.223852 kubelet[2104]: I0714 23:11:58.223282 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/ae75233e4ec4a26ca4f121d42c4b20ba-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"ae75233e4ec4a26ca4f121d42c4b20ba\") " pod="kube-system/kube-apiserver-localhost" Jul 14 23:11:58.847483 kubelet[2104]: I0714 23:11:58.847457 2104 apiserver.go:52] "Watching apiserver" Jul 14 23:11:58.872917 kubelet[2104]: I0714 23:11:58.872897 2104 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 14 23:11:58.910762 kubelet[2104]: I0714 23:11:58.910724 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.9107111730000002 podStartE2EDuration="1.910711173s" podCreationTimestamp="2025-07-14 23:11:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:11:58.903989795 +0000 UTC m=+1.118512906" watchObservedRunningTime="2025-07-14 23:11:58.910711173 +0000 UTC m=+1.125234277" Jul 14 23:11:58.921604 kubelet[2104]: I0714 23:11:58.921563 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.92154917 podStartE2EDuration="1.92154917s" podCreationTimestamp="2025-07-14 23:11:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:11:58.915754391 +0000 UTC m=+1.130277502" watchObservedRunningTime="2025-07-14 23:11:58.92154917 +0000 UTC m=+1.136072281" Jul 14 23:11:58.926687 kubelet[2104]: I0714 23:11:58.926660 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.926648348 podStartE2EDuration="1.926648348s" podCreationTimestamp="2025-07-14 23:11:57 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:11:58.922103972 +0000 UTC m=+1.136627083" watchObservedRunningTime="2025-07-14 23:11:58.926648348 +0000 UTC m=+1.141171460" Jul 14 23:12:00.536000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:12:00.536000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0014d8700 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:00.536000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:02.205529 kubelet[2104]: I0714 23:12:02.205498 2104 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 14 23:12:02.205842 kubelet[2104]: I0714 23:12:02.205828 2104 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 14 23:12:02.205875 env[1250]: time="2025-07-14T23:12:02.205710473Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 14 23:12:02.803111 systemd[1]: Created slice kubepods-besteffort-poddc59cc43_7692_485b_8a86_7ee80568e9ca.slice. Jul 14 23:12:02.954946 kubelet[2104]: I0714 23:12:02.954920 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/dc59cc43-7692-485b-8a86-7ee80568e9ca-lib-modules\") pod \"kube-proxy-45rv5\" (UID: \"dc59cc43-7692-485b-8a86-7ee80568e9ca\") " pod="kube-system/kube-proxy-45rv5" Jul 14 23:12:02.955158 kubelet[2104]: I0714 23:12:02.955145 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-d7f62\" (UniqueName: \"kubernetes.io/projected/dc59cc43-7692-485b-8a86-7ee80568e9ca-kube-api-access-d7f62\") pod \"kube-proxy-45rv5\" (UID: \"dc59cc43-7692-485b-8a86-7ee80568e9ca\") " pod="kube-system/kube-proxy-45rv5" Jul 14 23:12:02.955227 kubelet[2104]: I0714 23:12:02.955218 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/dc59cc43-7692-485b-8a86-7ee80568e9ca-kube-proxy\") pod \"kube-proxy-45rv5\" (UID: \"dc59cc43-7692-485b-8a86-7ee80568e9ca\") " pod="kube-system/kube-proxy-45rv5" Jul 14 23:12:02.955289 kubelet[2104]: I0714 23:12:02.955272 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/dc59cc43-7692-485b-8a86-7ee80568e9ca-xtables-lock\") pod \"kube-proxy-45rv5\" (UID: \"dc59cc43-7692-485b-8a86-7ee80568e9ca\") " pod="kube-system/kube-proxy-45rv5" Jul 14 23:12:03.059932 kubelet[2104]: I0714 23:12:03.059871 2104 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 14 23:12:03.111307 env[1250]: time="2025-07-14T23:12:03.110847984Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-45rv5,Uid:dc59cc43-7692-485b-8a86-7ee80568e9ca,Namespace:kube-system,Attempt:0,}" Jul 14 23:12:03.125338 systemd[1]: Created slice kubepods-besteffort-pod15c5ad23_711b_42b4_808c_7cd2109cd192.slice. Jul 14 23:12:03.130560 env[1250]: time="2025-07-14T23:12:03.130501502Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:03.130702 env[1250]: time="2025-07-14T23:12:03.130570235Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:03.130702 env[1250]: time="2025-07-14T23:12:03.130589010Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:03.131460 env[1250]: time="2025-07-14T23:12:03.130865466Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9e8302f434ddac890c1d060726038deeacd5338b579b1a677eb4d709f94af751 pid=2152 runtime=io.containerd.runc.v2 Jul 14 23:12:03.148031 systemd[1]: run-containerd-runc-k8s.io-9e8302f434ddac890c1d060726038deeacd5338b579b1a677eb4d709f94af751-runc.mShriT.mount: Deactivated successfully. Jul 14 23:12:03.149468 systemd[1]: Started cri-containerd-9e8302f434ddac890c1d060726038deeacd5338b579b1a677eb4d709f94af751.scope. Jul 14 23:12:03.166833 kernel: kauditd_printk_skb: 18 callbacks suppressed Jul 14 23:12:03.166923 kernel: audit: type=1400 audit(1752534723.162:829): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.166944 kernel: audit: type=1400 audit(1752534723.162:830): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.171541 kernel: audit: type=1400 audit(1752534723.162:831): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.174616 kernel: audit: type=1400 audit(1752534723.162:832): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.174704 kernel: audit: type=1400 audit(1752534723.162:833): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.179599 kernel: audit: type=1400 audit(1752534723.162:834): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.182171 kernel: audit: type=1400 audit(1752534723.162:835): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.184889 kernel: audit: type=1400 audit(1752534723.162:836): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.162000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.187663 kernel: audit: type=1400 audit(1752534723.162:837): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.190693 kernel: audit: type=1400 audit(1752534723.165:838): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.165000 audit: BPF prog-id=106 op=LOAD Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965383330326634333464646163383930633164303630373236303338 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965383330326634333464646163383930633164303630373236303338 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit: BPF prog-id=107 op=LOAD Jul 14 23:12:03.170000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001dee70 items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965383330326634333464646163383930633164303630373236303338 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit: BPF prog-id=108 op=LOAD Jul 14 23:12:03.170000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001deeb8 items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965383330326634333464646163383930633164303630373236303338 Jul 14 23:12:03.170000 audit: BPF prog-id=108 op=UNLOAD Jul 14 23:12:03.170000 audit: BPF prog-id=107 op=UNLOAD Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.170000 audit: BPF prog-id=109 op=LOAD Jul 14 23:12:03.170000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001df2c8 items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.170000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965383330326634333464646163383930633164303630373236303338 Jul 14 23:12:03.203330 env[1250]: time="2025-07-14T23:12:03.203301776Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-45rv5,Uid:dc59cc43-7692-485b-8a86-7ee80568e9ca,Namespace:kube-system,Attempt:0,} returns sandbox id \"9e8302f434ddac890c1d060726038deeacd5338b579b1a677eb4d709f94af751\"" Jul 14 23:12:03.206106 env[1250]: time="2025-07-14T23:12:03.206079915Z" level=info msg="CreateContainer within sandbox \"9e8302f434ddac890c1d060726038deeacd5338b579b1a677eb4d709f94af751\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 14 23:12:03.215334 env[1250]: time="2025-07-14T23:12:03.215307469Z" level=info msg="CreateContainer within sandbox \"9e8302f434ddac890c1d060726038deeacd5338b579b1a677eb4d709f94af751\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"565ceda966280b5542b1d60ee53090e93c3d807320f8b09d1e1252028e8520b6\"" Jul 14 23:12:03.216368 env[1250]: time="2025-07-14T23:12:03.216352613Z" level=info msg="StartContainer for \"565ceda966280b5542b1d60ee53090e93c3d807320f8b09d1e1252028e8520b6\"" Jul 14 23:12:03.228372 systemd[1]: Started cri-containerd-565ceda966280b5542b1d60ee53090e93c3d807320f8b09d1e1252028e8520b6.scope. Jul 14 23:12:03.239000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.239000 audit[2196]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001496b0 a2=3c a3=7fc204340298 items=0 ppid=2152 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.239000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536356365646139363632383062353534326231643630656535333039 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit: BPF prog-id=110 op=LOAD Jul 14 23:12:03.240000 audit[2196]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001499d8 a2=78 a3=c0001e1ed8 items=0 ppid=2152 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536356365646139363632383062353534326231643630656535333039 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.240000 audit: BPF prog-id=111 op=LOAD Jul 14 23:12:03.240000 audit[2196]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000149770 a2=78 a3=c0001e1f28 items=0 ppid=2152 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.240000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536356365646139363632383062353534326231643630656535333039 Jul 14 23:12:03.241000 audit: BPF prog-id=111 op=UNLOAD Jul 14 23:12:03.241000 audit: BPF prog-id=110 op=UNLOAD Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { perfmon } for pid=2196 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit[2196]: AVC avc: denied { bpf } for pid=2196 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.241000 audit: BPF prog-id=112 op=LOAD Jul 14 23:12:03.241000 audit[2196]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000149c30 a2=78 a3=c0001e1fb8 items=0 ppid=2152 pid=2196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.241000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3536356365646139363632383062353534326231643630656535333039 Jul 14 23:12:03.252918 env[1250]: time="2025-07-14T23:12:03.252887576Z" level=info msg="StartContainer for \"565ceda966280b5542b1d60ee53090e93c3d807320f8b09d1e1252028e8520b6\" returns successfully" Jul 14 23:12:03.257036 kubelet[2104]: I0714 23:12:03.256960 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/15c5ad23-711b-42b4-808c-7cd2109cd192-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-hpmq2\" (UID: \"15c5ad23-711b-42b4-808c-7cd2109cd192\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-hpmq2" Jul 14 23:12:03.257036 kubelet[2104]: I0714 23:12:03.256993 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vd76p\" (UniqueName: \"kubernetes.io/projected/15c5ad23-711b-42b4-808c-7cd2109cd192-kube-api-access-vd76p\") pod \"tigera-operator-5bf8dfcb4-hpmq2\" (UID: \"15c5ad23-711b-42b4-808c-7cd2109cd192\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-hpmq2" Jul 14 23:12:03.427804 env[1250]: time="2025-07-14T23:12:03.427735474Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-hpmq2,Uid:15c5ad23-711b-42b4-808c-7cd2109cd192,Namespace:tigera-operator,Attempt:0,}" Jul 14 23:12:03.448441 env[1250]: time="2025-07-14T23:12:03.448387167Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:03.448608 env[1250]: time="2025-07-14T23:12:03.448429314Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:03.448608 env[1250]: time="2025-07-14T23:12:03.448439820Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:03.448683 env[1250]: time="2025-07-14T23:12:03.448645804Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e078915cb1b8f16bd2049389722bae6e14e4c362d6ea39145cc1e52fb2671b5b pid=2230 runtime=io.containerd.runc.v2 Jul 14 23:12:03.460460 systemd[1]: Started cri-containerd-e078915cb1b8f16bd2049389722bae6e14e4c362d6ea39145cc1e52fb2671b5b.scope. Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.471000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit: BPF prog-id=113 op=LOAD Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373839313563623162386631366264323034393338393732326261 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373839313563623162386631366264323034393338393732326261 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit: BPF prog-id=114 op=LOAD Jul 14 23:12:03.472000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dba20 items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373839313563623162386631366264323034393338393732326261 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit: BPF prog-id=115 op=LOAD Jul 14 23:12:03.472000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dba68 items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373839313563623162386631366264323034393338393732326261 Jul 14 23:12:03.472000 audit: BPF prog-id=115 op=UNLOAD Jul 14 23:12:03.472000 audit: BPF prog-id=114 op=UNLOAD Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { perfmon } for pid=2239 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit[2239]: AVC avc: denied { bpf } for pid=2239 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:03.472000 audit: BPF prog-id=116 op=LOAD Jul 14 23:12:03.472000 audit[2239]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001dbe78 items=0 ppid=2230 pid=2239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.472000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6530373839313563623162386631366264323034393338393732326261 Jul 14 23:12:03.498932 env[1250]: time="2025-07-14T23:12:03.498906821Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-hpmq2,Uid:15c5ad23-711b-42b4-808c-7cd2109cd192,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"e078915cb1b8f16bd2049389722bae6e14e4c362d6ea39145cc1e52fb2671b5b\"" Jul 14 23:12:03.501162 env[1250]: time="2025-07-14T23:12:03.501149184Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 14 23:12:03.656000 audit[2298]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.656000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdbc1ecd80 a2=0 a3=7ffdbc1ecd6c items=0 ppid=2207 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.656000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:12:03.657000 audit[2299]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.657000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff96356d30 a2=0 a3=7fff96356d1c items=0 ppid=2207 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.657000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:12:03.658000 audit[2300]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.658000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe2d6c48f0 a2=0 a3=7ffe2d6c48dc items=0 ppid=2207 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.658000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:12:03.659000 audit[2301]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2301 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.659000 audit[2301]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc177cedc0 a2=0 a3=7ffc177cedac items=0 ppid=2207 pid=2301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.659000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 14 23:12:03.660000 audit[2302]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2302 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.660000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffeb0ef4460 a2=0 a3=7ffeb0ef444c items=0 ppid=2207 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.660000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 14 23:12:03.660000 audit[2303]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2303 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.660000 audit[2303]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7380d4a0 a2=0 a3=7ffc7380d48c items=0 ppid=2207 pid=2303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.660000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 14 23:12:03.767000 audit[2304]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2304 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.767000 audit[2304]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffdb2699a00 a2=0 a3=7ffdb26999ec items=0 ppid=2207 pid=2304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.767000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 23:12:03.771000 audit[2306]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.771000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe7e02fd40 a2=0 a3=7ffe7e02fd2c items=0 ppid=2207 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.771000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 14 23:12:03.773000 audit[2309]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.773000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7fff7f7ee630 a2=0 a3=7fff7f7ee61c items=0 ppid=2207 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.773000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 14 23:12:03.774000 audit[2310]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2310 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.774000 audit[2310]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9cd9b8b0 a2=0 a3=7ffe9cd9b89c items=0 ppid=2207 pid=2310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.774000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 23:12:03.776000 audit[2312]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2312 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.776000 audit[2312]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffb4cc67a0 a2=0 a3=7fffb4cc678c items=0 ppid=2207 pid=2312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 23:12:03.776000 audit[2313]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2313 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.776000 audit[2313]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdac6a8a80 a2=0 a3=7ffdac6a8a6c items=0 ppid=2207 pid=2313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.776000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 23:12:03.778000 audit[2315]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.778000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffce9ab7380 a2=0 a3=7ffce9ab736c items=0 ppid=2207 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.778000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 23:12:03.781000 audit[2318]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.781000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe7963d620 a2=0 a3=7ffe7963d60c items=0 ppid=2207 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 14 23:12:03.781000 audit[2319]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2319 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.781000 audit[2319]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcccfcbdc0 a2=0 a3=7ffcccfcbdac items=0 ppid=2207 pid=2319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.781000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 23:12:03.783000 audit[2321]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2321 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.783000 audit[2321]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9e15a0f0 a2=0 a3=7ffe9e15a0dc items=0 ppid=2207 pid=2321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.783000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 23:12:03.784000 audit[2322]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2322 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.784000 audit[2322]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffac4f5dd0 a2=0 a3=7fffac4f5dbc items=0 ppid=2207 pid=2322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.784000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 23:12:03.786000 audit[2324]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2324 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.786000 audit[2324]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffef91f1a20 a2=0 a3=7ffef91f1a0c items=0 ppid=2207 pid=2324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.786000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:12:03.788000 audit[2327]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.788000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc47711960 a2=0 a3=7ffc4771194c items=0 ppid=2207 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.788000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:12:03.791000 audit[2330]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2330 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.791000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd2d645130 a2=0 a3=7ffd2d64511c items=0 ppid=2207 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.791000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 23:12:03.792000 audit[2331]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.792000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff0fec03e0 a2=0 a3=7fff0fec03cc items=0 ppid=2207 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.792000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 23:12:03.798000 audit[2333]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.798000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffc4d0bb990 a2=0 a3=7ffc4d0bb97c items=0 ppid=2207 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.798000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:03.800000 audit[2336]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.800000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdc9868430 a2=0 a3=7ffdc986841c items=0 ppid=2207 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.800000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:03.801000 audit[2337]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2337 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.801000 audit[2337]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe6e33f210 a2=0 a3=7ffe6e33f1fc items=0 ppid=2207 pid=2337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.801000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 23:12:03.802000 audit[2339]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 14 23:12:03.802000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffd22690f10 a2=0 a3=7ffd22690efc items=0 ppid=2207 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.802000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 23:12:03.844000 audit[2345]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:03.844000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe7edebd70 a2=0 a3=7ffe7edebd5c items=0 ppid=2207 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.844000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:03.851000 audit[2345]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:03.851000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe7edebd70 a2=0 a3=7ffe7edebd5c items=0 ppid=2207 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.851000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:03.853000 audit[2350]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2350 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.853000 audit[2350]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc20226df0 a2=0 a3=7ffc20226ddc items=0 ppid=2207 pid=2350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.853000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 14 23:12:03.854000 audit[2352]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.854000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffce64f0ca0 a2=0 a3=7ffce64f0c8c items=0 ppid=2207 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.854000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 14 23:12:03.857000 audit[2355]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.857000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffcc434cc70 a2=0 a3=7ffcc434cc5c items=0 ppid=2207 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.857000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 14 23:12:03.858000 audit[2356]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2356 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.858000 audit[2356]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff5ce1e320 a2=0 a3=7fff5ce1e30c items=0 ppid=2207 pid=2356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.858000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 14 23:12:03.860000 audit[2358]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2358 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.860000 audit[2358]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffcaeba030 a2=0 a3=7fffcaeba01c items=0 ppid=2207 pid=2358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.860000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 14 23:12:03.861000 audit[2359]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2359 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.861000 audit[2359]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffaae5c560 a2=0 a3=7fffaae5c54c items=0 ppid=2207 pid=2359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.861000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 14 23:12:03.862000 audit[2361]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.862000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7fffa3095bf0 a2=0 a3=7fffa3095bdc items=0 ppid=2207 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.862000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 14 23:12:03.865000 audit[2364]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.865000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7fff0abfabe0 a2=0 a3=7fff0abfabcc items=0 ppid=2207 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.865000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 14 23:12:03.865000 audit[2365]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2365 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.865000 audit[2365]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf65636c0 a2=0 a3=7ffcf65636ac items=0 ppid=2207 pid=2365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.865000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 14 23:12:03.867000 audit[2367]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2367 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.867000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffd3188a3a0 a2=0 a3=7ffd3188a38c items=0 ppid=2207 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.867000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 14 23:12:03.868000 audit[2368]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2368 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.868000 audit[2368]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc2e29ab30 a2=0 a3=7ffc2e29ab1c items=0 ppid=2207 pid=2368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.868000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 14 23:12:03.870000 audit[2370]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2370 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.870000 audit[2370]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff24b892f0 a2=0 a3=7fff24b892dc items=0 ppid=2207 pid=2370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.870000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 14 23:12:03.873000 audit[2373]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.873000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff47fe1c00 a2=0 a3=7fff47fe1bec items=0 ppid=2207 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.873000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 14 23:12:03.875000 audit[2376]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.875000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff6af3c560 a2=0 a3=7fff6af3c54c items=0 ppid=2207 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.875000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 14 23:12:03.876000 audit[2377]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2377 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.876000 audit[2377]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd661ee0a0 a2=0 a3=7ffd661ee08c items=0 ppid=2207 pid=2377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.876000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 14 23:12:03.879000 audit[2379]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.879000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff8797fe90 a2=0 a3=7fff8797fe7c items=0 ppid=2207 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.879000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:03.881000 audit[2382]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.881000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fffec371970 a2=0 a3=7fffec37195c items=0 ppid=2207 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.881000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 14 23:12:03.882000 audit[2383]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.882000 audit[2383]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffde0cca090 a2=0 a3=7ffde0cca07c items=0 ppid=2207 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.882000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 14 23:12:03.883000 audit[2385]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.883000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffd367e55d0 a2=0 a3=7ffd367e55bc items=0 ppid=2207 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.883000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 14 23:12:03.884000 audit[2386]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.884000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc63bf5d30 a2=0 a3=7ffc63bf5d1c items=0 ppid=2207 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.884000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 14 23:12:03.885000 audit[2388]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2388 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.885000 audit[2388]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffe92f3ae80 a2=0 a3=7ffe92f3ae6c items=0 ppid=2207 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.885000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:12:03.888000 audit[2391]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 14 23:12:03.888000 audit[2391]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd11975bc0 a2=0 a3=7ffd11975bac items=0 ppid=2207 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.888000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 14 23:12:03.889000 audit[2393]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 23:12:03.889000 audit[2393]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fff88fb09a0 a2=0 a3=7fff88fb098c items=0 ppid=2207 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.889000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:03.890000 audit[2393]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2393 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 14 23:12:03.890000 audit[2393]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fff88fb09a0 a2=0 a3=7fff88fb098c items=0 ppid=2207 pid=2393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:03.890000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:05.140720 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1879449914.mount: Deactivated successfully. Jul 14 23:12:05.540188 kubelet[2104]: I0714 23:12:05.540152 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-45rv5" podStartSLOduration=3.540140538 podStartE2EDuration="3.540140538s" podCreationTimestamp="2025-07-14 23:12:02 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:03.906050676 +0000 UTC m=+6.120573786" watchObservedRunningTime="2025-07-14 23:12:05.540140538 +0000 UTC m=+7.754663649" Jul 14 23:12:05.763182 env[1250]: time="2025-07-14T23:12:05.763150562Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:05.776321 env[1250]: time="2025-07-14T23:12:05.776286964Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:05.777009 env[1250]: time="2025-07-14T23:12:05.776995171Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:05.777790 env[1250]: time="2025-07-14T23:12:05.777775462Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:05.778204 env[1250]: time="2025-07-14T23:12:05.778186271Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 14 23:12:05.779478 env[1250]: time="2025-07-14T23:12:05.779463193Z" level=info msg="CreateContainer within sandbox \"e078915cb1b8f16bd2049389722bae6e14e4c362d6ea39145cc1e52fb2671b5b\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 14 23:12:05.786319 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1368691751.mount: Deactivated successfully. Jul 14 23:12:05.794127 env[1250]: time="2025-07-14T23:12:05.793799769Z" level=info msg="CreateContainer within sandbox \"e078915cb1b8f16bd2049389722bae6e14e4c362d6ea39145cc1e52fb2671b5b\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"75c842b9cb721119a37c413b99b98eee1b0efadbec12434cc8792c063c69d3f5\"" Jul 14 23:12:05.794644 env[1250]: time="2025-07-14T23:12:05.794630209Z" level=info msg="StartContainer for \"75c842b9cb721119a37c413b99b98eee1b0efadbec12434cc8792c063c69d3f5\"" Jul 14 23:12:05.806612 systemd[1]: Started cri-containerd-75c842b9cb721119a37c413b99b98eee1b0efadbec12434cc8792c063c69d3f5.scope. Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.820000 audit: BPF prog-id=117 op=LOAD Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2230 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633834326239636237323131313961333763343133623939623938 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2230 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633834326239636237323131313961333763343133623939623938 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.821000 audit: BPF prog-id=118 op=LOAD Jul 14 23:12:05.821000 audit[2402]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003229e0 items=0 ppid=2230 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.821000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633834326239636237323131313961333763343133623939623938 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit: BPF prog-id=119 op=LOAD Jul 14 23:12:05.822000 audit[2402]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000322a28 items=0 ppid=2230 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633834326239636237323131313961333763343133623939623938 Jul 14 23:12:05.822000 audit: BPF prog-id=119 op=UNLOAD Jul 14 23:12:05.822000 audit: BPF prog-id=118 op=UNLOAD Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { perfmon } for pid=2402 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit[2402]: AVC avc: denied { bpf } for pid=2402 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:05.822000 audit: BPF prog-id=120 op=LOAD Jul 14 23:12:05.822000 audit[2402]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000322e38 items=0 ppid=2230 pid=2402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:05.822000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735633834326239636237323131313961333763343133623939623938 Jul 14 23:12:05.845154 env[1250]: time="2025-07-14T23:12:05.845123474Z" level=info msg="StartContainer for \"75c842b9cb721119a37c413b99b98eee1b0efadbec12434cc8792c063c69d3f5\" returns successfully" Jul 14 23:12:05.912454 kubelet[2104]: I0714 23:12:05.912405 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-hpmq2" podStartSLOduration=0.633648623 podStartE2EDuration="2.912394199s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="2025-07-14 23:12:03.499922358 +0000 UTC m=+5.714445457" lastFinishedPulling="2025-07-14 23:12:05.778667933 +0000 UTC m=+7.993191033" observedRunningTime="2025-07-14 23:12:05.905588022 +0000 UTC m=+8.120111134" watchObservedRunningTime="2025-07-14 23:12:05.912394199 +0000 UTC m=+8.126917310" Jul 14 23:12:06.106993 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2065104634.mount: Deactivated successfully. Jul 14 23:12:11.625277 sudo[1472]: pam_unix(sudo:session): session closed for user root Jul 14 23:12:11.629692 kernel: kauditd_printk_skb: 357 callbacks suppressed Jul 14 23:12:11.629746 kernel: audit: type=1106 audit(1752534731.623:940): pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:11.623000 audit[1472]: USER_END pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:11.632702 kernel: audit: type=1104 audit(1752534731.624:941): pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:11.624000 audit[1472]: CRED_DISP pid=1472 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 14 23:12:11.646723 sshd[1468]: pam_unix(sshd:session): session closed for user core Jul 14 23:12:11.661000 audit[1468]: USER_END pid=1468 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:11.669841 kernel: audit: type=1106 audit(1752534731.661:942): pid=1468 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:11.669908 kernel: audit: type=1104 audit(1752534731.661:943): pid=1468 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:11.661000 audit[1468]: CRED_DISP pid=1468 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:12:11.680335 systemd[1]: sshd@6-139.178.70.103:22-139.178.89.65:39884.service: Deactivated successfully. Jul 14 23:12:11.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.103:22-139.178.89.65:39884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:11.680977 systemd[1]: session-9.scope: Deactivated successfully. Jul 14 23:12:11.681079 systemd[1]: session-9.scope: Consumed 2.940s CPU time. Jul 14 23:12:11.683877 systemd-logind[1242]: Session 9 logged out. Waiting for processes to exit. Jul 14 23:12:11.684449 kernel: audit: type=1131 audit(1752534731.679:944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.103:22-139.178.89.65:39884 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:12:11.684702 systemd-logind[1242]: Removed session 9. Jul 14 23:12:12.255000 audit[2478]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.259561 kernel: audit: type=1325 audit(1752534732.255:945): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.255000 audit[2478]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd9694daa0 a2=0 a3=7ffd9694da8c items=0 ppid=2207 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.264434 kernel: audit: type=1300 audit(1752534732.255:945): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffd9694daa0 a2=0 a3=7ffd9694da8c items=0 ppid=2207 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.267433 kernel: audit: type=1327 audit(1752534732.255:945): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.264000 audit[2478]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.270437 kernel: audit: type=1325 audit(1752534732.264:946): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2478 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.264000 audit[2478]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd9694daa0 a2=0 a3=0 items=0 ppid=2207 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.277440 kernel: audit: type=1300 audit(1752534732.264:946): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd9694daa0 a2=0 a3=0 items=0 ppid=2207 pid=2478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.264000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.294000 audit[2480]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.294000 audit[2480]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff81efe660 a2=0 a3=7fff81efe64c items=0 ppid=2207 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:12.300000 audit[2480]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2480 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:12.300000 audit[2480]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff81efe660 a2=0 a3=0 items=0 ppid=2207 pid=2480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:12.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.323000 audit[2482]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.323000 audit[2482]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffc1c564c10 a2=0 a3=7ffc1c564bfc items=0 ppid=2207 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.323000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.327000 audit[2482]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2482 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.327000 audit[2482]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc1c564c10 a2=0 a3=0 items=0 ppid=2207 pid=2482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.327000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.384000 audit[2484]: NETFILTER_CFG table=filter:95 family=2 entries=18 op=nft_register_rule pid=2484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.384000 audit[2484]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffcb26728c0 a2=0 a3=7ffcb26728ac items=0 ppid=2207 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.389000 audit[2484]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2484 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:14.389000 audit[2484]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcb26728c0 a2=0 a3=0 items=0 ppid=2207 pid=2484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:14.389000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:14.873189 systemd[1]: Created slice kubepods-besteffort-podab9a558a_9048_4b68_9d2c_8a4b1f31f04c.slice. Jul 14 23:12:14.985404 systemd[1]: Created slice kubepods-besteffort-pod41f6b78d_d548_4d5a_948b_0779beefa3e8.slice. Jul 14 23:12:14.991363 kubelet[2104]: I0714 23:12:14.991325 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/ab9a558a-9048-4b68-9d2c-8a4b1f31f04c-typha-certs\") pod \"calico-typha-55744c6495-65j25\" (UID: \"ab9a558a-9048-4b68-9d2c-8a4b1f31f04c\") " pod="calico-system/calico-typha-55744c6495-65j25" Jul 14 23:12:14.991763 kubelet[2104]: I0714 23:12:14.991747 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tq6zg\" (UniqueName: \"kubernetes.io/projected/ab9a558a-9048-4b68-9d2c-8a4b1f31f04c-kube-api-access-tq6zg\") pod \"calico-typha-55744c6495-65j25\" (UID: \"ab9a558a-9048-4b68-9d2c-8a4b1f31f04c\") " pod="calico-system/calico-typha-55744c6495-65j25" Jul 14 23:12:14.991861 kubelet[2104]: I0714 23:12:14.991848 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/ab9a558a-9048-4b68-9d2c-8a4b1f31f04c-tigera-ca-bundle\") pod \"calico-typha-55744c6495-65j25\" (UID: \"ab9a558a-9048-4b68-9d2c-8a4b1f31f04c\") " pod="calico-system/calico-typha-55744c6495-65j25" Jul 14 23:12:15.092307 kubelet[2104]: I0714 23:12:15.092254 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-cni-bin-dir\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092307 kubelet[2104]: I0714 23:12:15.092292 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-flexvol-driver-host\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092307 kubelet[2104]: I0714 23:12:15.092305 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/41f6b78d-d548-4d5a-948b-0779beefa3e8-node-certs\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092307 kubelet[2104]: I0714 23:12:15.092319 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-cni-log-dir\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092691 kubelet[2104]: I0714 23:12:15.092328 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-lib-modules\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092691 kubelet[2104]: I0714 23:12:15.092351 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-cni-net-dir\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092691 kubelet[2104]: I0714 23:12:15.092360 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/41f6b78d-d548-4d5a-948b-0779beefa3e8-tigera-ca-bundle\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092691 kubelet[2104]: I0714 23:12:15.092368 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-xtables-lock\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092691 kubelet[2104]: I0714 23:12:15.092377 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-tmp2f\" (UniqueName: \"kubernetes.io/projected/41f6b78d-d548-4d5a-948b-0779beefa3e8-kube-api-access-tmp2f\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092938 kubelet[2104]: I0714 23:12:15.092395 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-policysync\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092938 kubelet[2104]: I0714 23:12:15.092403 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-var-lib-calico\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.092938 kubelet[2104]: I0714 23:12:15.092432 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/41f6b78d-d548-4d5a-948b-0779beefa3e8-var-run-calico\") pod \"calico-node-k8tcs\" (UID: \"41f6b78d-d548-4d5a-948b-0779beefa3e8\") " pod="calico-system/calico-node-k8tcs" Jul 14 23:12:15.149753 kubelet[2104]: E0714 23:12:15.149655 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:15.254439 kubelet[2104]: I0714 23:12:15.254401 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/77278217-2907-4c17-b495-1275ac4f971e-kubelet-dir\") pod \"csi-node-driver-k88bl\" (UID: \"77278217-2907-4c17-b495-1275ac4f971e\") " pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:15.254439 kubelet[2104]: I0714 23:12:15.254436 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/77278217-2907-4c17-b495-1275ac4f971e-registration-dir\") pod \"csi-node-driver-k88bl\" (UID: \"77278217-2907-4c17-b495-1275ac4f971e\") " pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:15.254571 kubelet[2104]: I0714 23:12:15.254451 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-n4xqw\" (UniqueName: \"kubernetes.io/projected/77278217-2907-4c17-b495-1275ac4f971e-kube-api-access-n4xqw\") pod \"csi-node-driver-k88bl\" (UID: \"77278217-2907-4c17-b495-1275ac4f971e\") " pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:15.254571 kubelet[2104]: I0714 23:12:15.254468 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/77278217-2907-4c17-b495-1275ac4f971e-socket-dir\") pod \"csi-node-driver-k88bl\" (UID: \"77278217-2907-4c17-b495-1275ac4f971e\") " pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:15.254571 kubelet[2104]: I0714 23:12:15.254477 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/77278217-2907-4c17-b495-1275ac4f971e-varrun\") pod \"csi-node-driver-k88bl\" (UID: \"77278217-2907-4c17-b495-1275ac4f971e\") " pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:15.275287 kubelet[2104]: E0714 23:12:15.275261 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.275287 kubelet[2104]: W0714 23:12:15.275280 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.275449 kubelet[2104]: E0714 23:12:15.275300 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.282714 env[1250]: time="2025-07-14T23:12:15.282433184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-55744c6495-65j25,Uid:ab9a558a-9048-4b68-9d2c-8a4b1f31f04c,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:15.287992 env[1250]: time="2025-07-14T23:12:15.287946429Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-k8tcs,Uid:41f6b78d-d548-4d5a-948b-0779beefa3e8,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:15.355016 kubelet[2104]: E0714 23:12:15.354970 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355016 kubelet[2104]: W0714 23:12:15.355009 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.355156 kubelet[2104]: E0714 23:12:15.355026 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.355191 kubelet[2104]: E0714 23:12:15.355184 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355220 kubelet[2104]: W0714 23:12:15.355191 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.355220 kubelet[2104]: E0714 23:12:15.355198 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.355343 kubelet[2104]: E0714 23:12:15.355329 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355343 kubelet[2104]: W0714 23:12:15.355339 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.355437 kubelet[2104]: E0714 23:12:15.355351 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.355513 kubelet[2104]: E0714 23:12:15.355501 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355513 kubelet[2104]: W0714 23:12:15.355511 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.355585 kubelet[2104]: E0714 23:12:15.355528 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.355677 kubelet[2104]: E0714 23:12:15.355660 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355677 kubelet[2104]: W0714 23:12:15.355672 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.355743 kubelet[2104]: E0714 23:12:15.355680 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.355846 kubelet[2104]: E0714 23:12:15.355831 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355846 kubelet[2104]: W0714 23:12:15.355842 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.355914 kubelet[2104]: E0714 23:12:15.355853 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.355962 kubelet[2104]: E0714 23:12:15.355949 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.355962 kubelet[2104]: W0714 23:12:15.355958 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356028 kubelet[2104]: E0714 23:12:15.355965 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.356069 kubelet[2104]: E0714 23:12:15.356056 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.356069 kubelet[2104]: W0714 23:12:15.356067 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356135 kubelet[2104]: E0714 23:12:15.356075 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.356225 kubelet[2104]: E0714 23:12:15.356212 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.356225 kubelet[2104]: W0714 23:12:15.356222 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356294 kubelet[2104]: E0714 23:12:15.356229 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.356357 kubelet[2104]: E0714 23:12:15.356343 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.356357 kubelet[2104]: W0714 23:12:15.356355 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356440 kubelet[2104]: E0714 23:12:15.356368 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.356505 kubelet[2104]: E0714 23:12:15.356489 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.356552 kubelet[2104]: W0714 23:12:15.356501 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356552 kubelet[2104]: E0714 23:12:15.356520 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.356625 kubelet[2104]: E0714 23:12:15.356611 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.356625 kubelet[2104]: W0714 23:12:15.356620 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356702 kubelet[2104]: E0714 23:12:15.356627 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.356775 kubelet[2104]: E0714 23:12:15.356760 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.356775 kubelet[2104]: W0714 23:12:15.356771 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.356842 kubelet[2104]: E0714 23:12:15.356782 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.357124 kubelet[2104]: E0714 23:12:15.357107 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.357124 kubelet[2104]: W0714 23:12:15.357118 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.357207 kubelet[2104]: E0714 23:12:15.357137 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.357275 kubelet[2104]: E0714 23:12:15.357260 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.357275 kubelet[2104]: W0714 23:12:15.357273 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.357344 kubelet[2104]: E0714 23:12:15.357282 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.357441 kubelet[2104]: E0714 23:12:15.357395 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.357441 kubelet[2104]: W0714 23:12:15.357407 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.357441 kubelet[2104]: E0714 23:12:15.357430 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.358371 kubelet[2104]: E0714 23:12:15.358358 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.358461 kubelet[2104]: W0714 23:12:15.358447 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.358561 kubelet[2104]: E0714 23:12:15.358527 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.358777 kubelet[2104]: E0714 23:12:15.358767 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.358841 kubelet[2104]: W0714 23:12:15.358829 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.358903 kubelet[2104]: E0714 23:12:15.358891 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.359076 kubelet[2104]: E0714 23:12:15.359067 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.359204 kubelet[2104]: W0714 23:12:15.359192 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.359265 kubelet[2104]: E0714 23:12:15.359253 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.359475 kubelet[2104]: E0714 23:12:15.359466 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.359539 kubelet[2104]: W0714 23:12:15.359528 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.359602 kubelet[2104]: E0714 23:12:15.359591 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.359783 kubelet[2104]: E0714 23:12:15.359774 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.359846 kubelet[2104]: W0714 23:12:15.359835 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.359905 kubelet[2104]: E0714 23:12:15.359895 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.360067 kubelet[2104]: E0714 23:12:15.360058 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.360123 kubelet[2104]: W0714 23:12:15.360112 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.360185 kubelet[2104]: E0714 23:12:15.360175 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.360345 kubelet[2104]: E0714 23:12:15.360336 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.360406 kubelet[2104]: W0714 23:12:15.360395 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.360526 kubelet[2104]: E0714 23:12:15.360515 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.360716 kubelet[2104]: E0714 23:12:15.360707 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.360778 kubelet[2104]: W0714 23:12:15.360767 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.360840 kubelet[2104]: E0714 23:12:15.360830 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.367876 kubelet[2104]: E0714 23:12:15.367773 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.367876 kubelet[2104]: W0714 23:12:15.367797 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.367876 kubelet[2104]: E0714 23:12:15.367834 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.378685 kubelet[2104]: E0714 23:12:15.378651 2104 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 14 23:12:15.378685 kubelet[2104]: W0714 23:12:15.378679 2104 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 14 23:12:15.391069 kubelet[2104]: E0714 23:12:15.378703 2104 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 14 23:12:15.398000 audit[2518]: NETFILTER_CFG table=filter:97 family=2 entries=20 op=nft_register_rule pid=2518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:15.398000 audit[2518]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe4b2bdfe0 a2=0 a3=7ffe4b2bdfcc items=0 ppid=2207 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:15.404000 audit[2518]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2518 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:15.404000 audit[2518]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe4b2bdfe0 a2=0 a3=0 items=0 ppid=2207 pid=2518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.404000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:15.433242 env[1250]: time="2025-07-14T23:12:15.433190080Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:15.433347 env[1250]: time="2025-07-14T23:12:15.433250476Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:15.433347 env[1250]: time="2025-07-14T23:12:15.433267786Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:15.433756 env[1250]: time="2025-07-14T23:12:15.433403091Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788 pid=2526 runtime=io.containerd.runc.v2 Jul 14 23:12:15.441666 systemd[1]: Started cri-containerd-70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788.scope. Jul 14 23:12:15.447981 env[1250]: time="2025-07-14T23:12:15.447926159Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:15.448113 env[1250]: time="2025-07-14T23:12:15.448098028Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:15.448184 env[1250]: time="2025-07-14T23:12:15.448170164Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:15.448377 env[1250]: time="2025-07-14T23:12:15.448357283Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0 pid=2554 runtime=io.containerd.runc.v2 Jul 14 23:12:15.459571 systemd[1]: Started cri-containerd-22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0.scope. Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit: BPF prog-id=121 op=LOAD Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2526 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633334643737613230386139323662363966306666613862323736 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2526 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633334643737613230386139323662363966306666613862323736 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit: BPF prog-id=122 op=LOAD Jul 14 23:12:15.461000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000310f50 items=0 ppid=2526 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633334643737613230386139323662363966306666613862323736 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit: BPF prog-id=123 op=LOAD Jul 14 23:12:15.461000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000310f98 items=0 ppid=2526 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633334643737613230386139323662363966306666613862323736 Jul 14 23:12:15.461000 audit: BPF prog-id=123 op=UNLOAD Jul 14 23:12:15.461000 audit: BPF prog-id=122 op=UNLOAD Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { perfmon } for pid=2536 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit[2536]: AVC avc: denied { bpf } for pid=2536 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.461000 audit: BPF prog-id=124 op=LOAD Jul 14 23:12:15.461000 audit[2536]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003113a8 items=0 ppid=2526 pid=2536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.461000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3730633334643737613230386139323662363966306666613862323736 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit: BPF prog-id=125 op=LOAD Jul 14 23:12:15.478000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[2565]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2554 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232303337623561303465623463613230373936323032333332666366 Jul 14 23:12:15.478000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.478000 audit[2565]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2554 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.478000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232303337623561303465623463613230373936323032333332666366 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit: BPF prog-id=126 op=LOAD Jul 14 23:12:15.479000 audit[2565]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000398a00 items=0 ppid=2554 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232303337623561303465623463613230373936323032333332666366 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit: BPF prog-id=127 op=LOAD Jul 14 23:12:15.479000 audit[2565]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000398a48 items=0 ppid=2554 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232303337623561303465623463613230373936323032333332666366 Jul 14 23:12:15.479000 audit: BPF prog-id=127 op=UNLOAD Jul 14 23:12:15.479000 audit: BPF prog-id=126 op=UNLOAD Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { perfmon } for pid=2565 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit[2565]: AVC avc: denied { bpf } for pid=2565 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:15.479000 audit: BPF prog-id=128 op=LOAD Jul 14 23:12:15.479000 audit[2565]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000398e58 items=0 ppid=2554 pid=2565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:15.479000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3232303337623561303465623463613230373936323032333332666366 Jul 14 23:12:15.490456 env[1250]: time="2025-07-14T23:12:15.490431968Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-k8tcs,Uid:41f6b78d-d548-4d5a-948b-0779beefa3e8,Namespace:calico-system,Attempt:0,} returns sandbox id \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\"" Jul 14 23:12:15.497905 env[1250]: time="2025-07-14T23:12:15.497876709Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 14 23:12:15.507189 env[1250]: time="2025-07-14T23:12:15.507163080Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-55744c6495-65j25,Uid:ab9a558a-9048-4b68-9d2c-8a4b1f31f04c,Namespace:calico-system,Attempt:0,} returns sandbox id \"70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788\"" Jul 14 23:12:16.878719 kubelet[2104]: E0714 23:12:16.878677 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:17.214408 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2653437622.mount: Deactivated successfully. Jul 14 23:12:17.447793 env[1250]: time="2025-07-14T23:12:17.447762039Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:17.448598 env[1250]: time="2025-07-14T23:12:17.448581525Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:17.449528 env[1250]: time="2025-07-14T23:12:17.449503062Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:17.451224 env[1250]: time="2025-07-14T23:12:17.451200764Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:17.451508 env[1250]: time="2025-07-14T23:12:17.451470709Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 14 23:12:17.452852 env[1250]: time="2025-07-14T23:12:17.452835868Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 14 23:12:17.454191 env[1250]: time="2025-07-14T23:12:17.453814595Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 14 23:12:17.461636 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2426234732.mount: Deactivated successfully. Jul 14 23:12:17.480247 env[1250]: time="2025-07-14T23:12:17.478701487Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81\"" Jul 14 23:12:17.483031 env[1250]: time="2025-07-14T23:12:17.481781541Z" level=info msg="StartContainer for \"c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81\"" Jul 14 23:12:17.496276 systemd[1]: Started cri-containerd-c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81.scope. Jul 14 23:12:17.510000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513150 kernel: kauditd_printk_skb: 139 callbacks suppressed Jul 14 23:12:17.513193 kernel: audit: type=1400 audit(1752534737.510:991): avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.510000 audit[2608]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f1a30378cc8 items=0 ppid=2554 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:17.520187 kernel: audit: type=1300 audit(1752534737.510:991): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7f1a30378cc8 items=0 ppid=2554 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:17.520261 kernel: audit: type=1327 audit(1752534737.510:991): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332653439383438643732316565356262393736626435613339636461 Jul 14 23:12:17.510000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332653439383438643732316565356262393736626435613339636461 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.526463 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.529427 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.533450 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.537928 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.544430 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.550436 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.590150 kernel: audit: type=1400 audit(1752534737.513:992): avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.513000 audit: BPF prog-id=129 op=LOAD Jul 14 23:12:17.513000 audit[2608]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c0002848f8 items=0 ppid=2554 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:17.513000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332653439383438643732316565356262393736626435613339636461 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit: BPF prog-id=130 op=LOAD Jul 14 23:12:17.514000 audit[2608]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000284948 items=0 ppid=2554 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:17.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332653439383438643732316565356262393736626435613339636461 Jul 14 23:12:17.514000 audit: BPF prog-id=130 op=UNLOAD Jul 14 23:12:17.514000 audit: BPF prog-id=129 op=UNLOAD Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { perfmon } for pid=2608 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit[2608]: AVC avc: denied { bpf } for pid=2608 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:17.514000 audit: BPF prog-id=131 op=LOAD Jul 14 23:12:17.514000 audit[2608]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c0002849d8 items=0 ppid=2554 pid=2608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:17.514000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6332653439383438643732316565356262393736626435613339636461 Jul 14 23:12:17.596272 systemd[1]: cri-containerd-c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81.scope: Deactivated successfully. Jul 14 23:12:17.597000 audit: BPF prog-id=131 op=UNLOAD Jul 14 23:12:17.633823 env[1250]: time="2025-07-14T23:12:17.633781406Z" level=info msg="StartContainer for \"c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81\" returns successfully" Jul 14 23:12:17.815206 env[1250]: time="2025-07-14T23:12:17.815174475Z" level=info msg="shim disconnected" id=c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81 Jul 14 23:12:17.815206 env[1250]: time="2025-07-14T23:12:17.815202825Z" level=warning msg="cleaning up after shim disconnected" id=c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81 namespace=k8s.io Jul 14 23:12:17.815206 env[1250]: time="2025-07-14T23:12:17.815211795Z" level=info msg="cleaning up dead shim" Jul 14 23:12:17.821576 env[1250]: time="2025-07-14T23:12:17.821548386Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:12:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2648 runtime=io.containerd.runc.v2\n" Jul 14 23:12:18.182452 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c2e49848d721ee5bb976bd5a39cda82cec77c61d46d3518cbd968c40de73ba81-rootfs.mount: Deactivated successfully. Jul 14 23:12:18.878531 kubelet[2104]: E0714 23:12:18.878497 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:20.579001 env[1250]: time="2025-07-14T23:12:20.578968431Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.639731 env[1250]: time="2025-07-14T23:12:20.639700039Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.667021 env[1250]: time="2025-07-14T23:12:20.666987553Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.712160 env[1250]: time="2025-07-14T23:12:20.712121322Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:20.712813 env[1250]: time="2025-07-14T23:12:20.712790843Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 14 23:12:20.715829 env[1250]: time="2025-07-14T23:12:20.715684936Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 14 23:12:20.722992 env[1250]: time="2025-07-14T23:12:20.722969702Z" level=info msg="CreateContainer within sandbox \"70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 14 23:12:20.845587 env[1250]: time="2025-07-14T23:12:20.845509482Z" level=info msg="CreateContainer within sandbox \"70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319\"" Jul 14 23:12:20.846180 env[1250]: time="2025-07-14T23:12:20.846147439Z" level=info msg="StartContainer for \"79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319\"" Jul 14 23:12:20.861266 systemd[1]: Started cri-containerd-79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319.scope. Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit: BPF prog-id=132 op=LOAD Jul 14 23:12:20.871000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.871000 audit[2675]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2526 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.871000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739653962313231323938653535353066396232376333303737383230 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2526 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739653962313231323938653535353066396232376333303737383230 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit: BPF prog-id=133 op=LOAD Jul 14 23:12:20.872000 audit[2675]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0001cabc0 items=0 ppid=2526 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739653962313231323938653535353066396232376333303737383230 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.872000 audit: BPF prog-id=134 op=LOAD Jul 14 23:12:20.872000 audit[2675]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0001cac08 items=0 ppid=2526 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.872000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739653962313231323938653535353066396232376333303737383230 Jul 14 23:12:20.873000 audit: BPF prog-id=134 op=UNLOAD Jul 14 23:12:20.873000 audit: BPF prog-id=133 op=UNLOAD Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { perfmon } for pid=2675 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit[2675]: AVC avc: denied { bpf } for pid=2675 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:20.873000 audit: BPF prog-id=135 op=LOAD Jul 14 23:12:20.873000 audit[2675]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0001cb018 items=0 ppid=2526 pid=2675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:20.873000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739653962313231323938653535353066396232376333303737383230 Jul 14 23:12:20.889194 kubelet[2104]: E0714 23:12:20.878661 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:20.916732 env[1250]: time="2025-07-14T23:12:20.916704356Z" level=info msg="StartContainer for \"79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319\" returns successfully" Jul 14 23:12:21.923558 kubelet[2104]: I0714 23:12:21.923537 2104 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:12:22.879607 kubelet[2104]: E0714 23:12:22.879576 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:24.880302 kubelet[2104]: E0714 23:12:24.878349 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:25.541265 env[1250]: time="2025-07-14T23:12:25.541224785Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:25.559764 env[1250]: time="2025-07-14T23:12:25.559725928Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:25.569914 env[1250]: time="2025-07-14T23:12:25.569881297Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:25.583202 env[1250]: time="2025-07-14T23:12:25.583142621Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:25.583444 env[1250]: time="2025-07-14T23:12:25.583411006Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 14 23:12:25.586214 env[1250]: time="2025-07-14T23:12:25.586194851Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 14 23:12:25.633976 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2842147463.mount: Deactivated successfully. Jul 14 23:12:25.704235 env[1250]: time="2025-07-14T23:12:25.704132649Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d\"" Jul 14 23:12:25.704553 env[1250]: time="2025-07-14T23:12:25.704538735Z" level=info msg="StartContainer for \"76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d\"" Jul 14 23:12:25.722100 systemd[1]: Started cri-containerd-76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d.scope. Jul 14 23:12:25.744000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.759378 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 14 23:12:25.759483 kernel: audit: type=1400 audit(1752534745.744:1016): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.744000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa1a737f988 items=0 ppid=2554 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:25.744000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333939636432373566363433383566376364613063366138363232 Jul 14 23:12:25.770353 kernel: audit: type=1300 audit(1752534745.744:1016): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fa1a737f988 items=0 ppid=2554 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:25.770393 kernel: audit: type=1327 audit(1752534745.744:1016): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333939636432373566363433383566376364613063366138363232 Jul 14 23:12:25.770703 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.775802 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.778392 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.783560 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.783594 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.783613 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.789738 kernel: audit: type=1400 audit(1752534745.747:1017): avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.747000 audit: BPF prog-id=136 op=LOAD Jul 14 23:12:25.747000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000dbd58 items=0 ppid=2554 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:25.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333939636432373566363433383566376364613063366138363232 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit: BPF prog-id=137 op=LOAD Jul 14 23:12:25.760000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000dbda8 items=0 ppid=2554 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:25.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333939636432373566363433383566376364613063366138363232 Jul 14 23:12:25.760000 audit: BPF prog-id=137 op=UNLOAD Jul 14 23:12:25.760000 audit: BPF prog-id=136 op=UNLOAD Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { perfmon } for pid=2717 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit[2717]: AVC avc: denied { bpf } for pid=2717 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:25.760000 audit: BPF prog-id=138 op=LOAD Jul 14 23:12:25.760000 audit[2717]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000dbe38 items=0 ppid=2554 pid=2717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:25.760000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3736333939636432373566363433383566376364613063366138363232 Jul 14 23:12:25.817267 env[1250]: time="2025-07-14T23:12:25.817197068Z" level=info msg="StartContainer for \"76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d\" returns successfully" Jul 14 23:12:26.263387 kubelet[2104]: I0714 23:12:26.214760 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-55744c6495-65j25" podStartSLOduration=6.964474465 podStartE2EDuration="12.170197979s" podCreationTimestamp="2025-07-14 23:12:14 +0000 UTC" firstStartedPulling="2025-07-14 23:12:15.507947667 +0000 UTC m=+17.722470771" lastFinishedPulling="2025-07-14 23:12:20.713671177 +0000 UTC m=+22.928194285" observedRunningTime="2025-07-14 23:12:20.949868392 +0000 UTC m=+23.164391504" watchObservedRunningTime="2025-07-14 23:12:26.170197979 +0000 UTC m=+28.384721085" Jul 14 23:12:26.632605 systemd[1]: run-containerd-runc-k8s.io-76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d-runc.Wq5enV.mount: Deactivated successfully. Jul 14 23:12:26.879038 kubelet[2104]: E0714 23:12:26.878998 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:28.878628 kubelet[2104]: E0714 23:12:28.878593 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:29.567848 env[1250]: time="2025-07-14T23:12:29.567794500Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 14 23:12:29.570055 systemd[1]: cri-containerd-76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d.scope: Deactivated successfully. Jul 14 23:12:29.572000 audit: BPF prog-id=138 op=UNLOAD Jul 14 23:12:29.584259 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d-rootfs.mount: Deactivated successfully. Jul 14 23:12:29.617005 env[1250]: time="2025-07-14T23:12:29.616972666Z" level=info msg="shim disconnected" id=76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d Jul 14 23:12:29.621345 env[1250]: time="2025-07-14T23:12:29.617114635Z" level=warning msg="cleaning up after shim disconnected" id=76399cd275f64385f7cda0c6a8622fd4d02cdc29fb6f6c53f2b93e422a431f4d namespace=k8s.io Jul 14 23:12:29.621345 env[1250]: time="2025-07-14T23:12:29.617123459Z" level=info msg="cleaning up dead shim" Jul 14 23:12:29.621411 kubelet[2104]: I0714 23:12:29.605896 2104 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 14 23:12:29.622469 env[1250]: time="2025-07-14T23:12:29.622411307Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:12:29Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2756 runtime=io.containerd.runc.v2\n" Jul 14 23:12:29.842659 systemd[1]: Created slice kubepods-besteffort-pod6e2ec9ce_0970_462d_a8cb_5fe0646db8b4.slice. Jul 14 23:12:29.851499 systemd[1]: Created slice kubepods-besteffort-poda08d23a3_9e4e_42f3_9191_147690a8736b.slice. Jul 14 23:12:29.860912 systemd[1]: Created slice kubepods-besteffort-pod1a21ac09_ca35_4722_b2a3_bce6c2fba7ee.slice. Jul 14 23:12:29.866820 kubelet[2104]: I0714 23:12:29.866798 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-key-pair\") pod \"goldmane-58fd7646b9-mng8c\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " pod="calico-system/goldmane-58fd7646b9-mng8c" Jul 14 23:12:29.873154 kubelet[2104]: I0714 23:12:29.866913 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a08d23a3-9e4e-42f3-9191-147690a8736b-calico-apiserver-certs\") pod \"calico-apiserver-866fb9ff9d-zmphk\" (UID: \"a08d23a3-9e4e-42f3-9191-147690a8736b\") " pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" Jul 14 23:12:29.873154 kubelet[2104]: I0714 23:12:29.866929 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/68c74c57-331c-447e-bf00-1d922c415b91-config-volume\") pod \"coredns-7c65d6cfc9-qt22r\" (UID: \"68c74c57-331c-447e-bf00-1d922c415b91\") " pod="kube-system/coredns-7c65d6cfc9-qt22r" Jul 14 23:12:29.873154 kubelet[2104]: I0714 23:12:29.866945 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-config\") pod \"goldmane-58fd7646b9-mng8c\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " pod="calico-system/goldmane-58fd7646b9-mng8c" Jul 14 23:12:29.873154 kubelet[2104]: I0714 23:12:29.866958 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8852s\" (UniqueName: \"kubernetes.io/projected/a08d23a3-9e4e-42f3-9191-147690a8736b-kube-api-access-8852s\") pod \"calico-apiserver-866fb9ff9d-zmphk\" (UID: \"a08d23a3-9e4e-42f3-9191-147690a8736b\") " pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" Jul 14 23:12:29.873154 kubelet[2104]: I0714 23:12:29.866971 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-hf9cs\" (UniqueName: \"kubernetes.io/projected/1da8b3e4-5379-453c-91ee-94146b265671-kube-api-access-hf9cs\") pod \"whisker-7c847fc58f-bpmwn\" (UID: \"1da8b3e4-5379-453c-91ee-94146b265671\") " pod="calico-system/whisker-7c847fc58f-bpmwn" Jul 14 23:12:29.870371 systemd[1]: Created slice kubepods-besteffort-poda344ebf2_1f08_4992_af9c_40b717e107d2.slice. Jul 14 23:12:29.886981 kubelet[2104]: I0714 23:12:29.866982 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1da8b3e4-5379-453c-91ee-94146b265671-whisker-ca-bundle\") pod \"whisker-7c847fc58f-bpmwn\" (UID: \"1da8b3e4-5379-453c-91ee-94146b265671\") " pod="calico-system/whisker-7c847fc58f-bpmwn" Jul 14 23:12:29.886981 kubelet[2104]: I0714 23:12:29.866993 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7rz5g\" (UniqueName: \"kubernetes.io/projected/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-kube-api-access-7rz5g\") pod \"calico-apiserver-866fb9ff9d-grs5p\" (UID: \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\") " pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" Jul 14 23:12:29.886981 kubelet[2104]: I0714 23:12:29.867005 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a344ebf2-1f08-4992-af9c-40b717e107d2-tigera-ca-bundle\") pod \"calico-kube-controllers-ff54b7cbb-m45xx\" (UID: \"a344ebf2-1f08-4992-af9c-40b717e107d2\") " pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" Jul 14 23:12:29.886981 kubelet[2104]: I0714 23:12:29.867017 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1da8b3e4-5379-453c-91ee-94146b265671-whisker-backend-key-pair\") pod \"whisker-7c847fc58f-bpmwn\" (UID: \"1da8b3e4-5379-453c-91ee-94146b265671\") " pod="calico-system/whisker-7c847fc58f-bpmwn" Jul 14 23:12:29.886981 kubelet[2104]: I0714 23:12:29.867026 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v6psv\" (UniqueName: \"kubernetes.io/projected/68c74c57-331c-447e-bf00-1d922c415b91-kube-api-access-v6psv\") pod \"coredns-7c65d6cfc9-qt22r\" (UID: \"68c74c57-331c-447e-bf00-1d922c415b91\") " pod="kube-system/coredns-7c65d6cfc9-qt22r" Jul 14 23:12:29.873981 systemd[1]: Created slice kubepods-besteffort-pod1da8b3e4_5379_453c_91ee_94146b265671.slice. Jul 14 23:12:29.889087 kubelet[2104]: I0714 23:12:29.867037 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9h8l9\" (UniqueName: \"kubernetes.io/projected/a344ebf2-1f08-4992-af9c-40b717e107d2-kube-api-access-9h8l9\") pod \"calico-kube-controllers-ff54b7cbb-m45xx\" (UID: \"a344ebf2-1f08-4992-af9c-40b717e107d2\") " pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" Jul 14 23:12:29.889087 kubelet[2104]: I0714 23:12:29.867048 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-config-volume\") pod \"coredns-7c65d6cfc9-vjmsz\" (UID: \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\") " pod="kube-system/coredns-7c65d6cfc9-vjmsz" Jul 14 23:12:29.889087 kubelet[2104]: I0714 23:12:29.867061 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8nfbw\" (UniqueName: \"kubernetes.io/projected/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-kube-api-access-8nfbw\") pod \"goldmane-58fd7646b9-mng8c\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " pod="calico-system/goldmane-58fd7646b9-mng8c" Jul 14 23:12:29.889087 kubelet[2104]: I0714 23:12:29.867073 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-calico-apiserver-certs\") pod \"calico-apiserver-866fb9ff9d-grs5p\" (UID: \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\") " pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" Jul 14 23:12:29.889087 kubelet[2104]: I0714 23:12:29.867084 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-j62hr\" (UniqueName: \"kubernetes.io/projected/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-kube-api-access-j62hr\") pod \"coredns-7c65d6cfc9-vjmsz\" (UID: \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\") " pod="kube-system/coredns-7c65d6cfc9-vjmsz" Jul 14 23:12:29.877678 systemd[1]: Created slice kubepods-burstable-pod68c74c57_331c_447e_bf00_1d922c415b91.slice. Jul 14 23:12:29.889268 kubelet[2104]: I0714 23:12:29.867094 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-mng8c\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " pod="calico-system/goldmane-58fd7646b9-mng8c" Jul 14 23:12:29.882053 systemd[1]: Created slice kubepods-burstable-pod65aa8c25_c100_4c4d_b765_2e9deaf1c86c.slice. Jul 14 23:12:29.938097 env[1250]: time="2025-07-14T23:12:29.937992827Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 14 23:12:30.161731 env[1250]: time="2025-07-14T23:12:30.160523200Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-zmphk,Uid:a08d23a3-9e4e-42f3-9191-147690a8736b,Namespace:calico-apiserver,Attempt:0,}" Jul 14 23:12:30.162053 env[1250]: time="2025-07-14T23:12:30.160521305Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-grs5p,Uid:6e2ec9ce-0970-462d-a8cb-5fe0646db8b4,Namespace:calico-apiserver,Attempt:0,}" Jul 14 23:12:30.169305 env[1250]: time="2025-07-14T23:12:30.169120175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-mng8c,Uid:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.174558 env[1250]: time="2025-07-14T23:12:30.174523082Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-ff54b7cbb-m45xx,Uid:a344ebf2-1f08-4992-af9c-40b717e107d2,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.178334 env[1250]: time="2025-07-14T23:12:30.178307802Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7c847fc58f-bpmwn,Uid:1da8b3e4-5379-453c-91ee-94146b265671,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.180790 env[1250]: time="2025-07-14T23:12:30.180761105Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qt22r,Uid:68c74c57-331c-447e-bf00-1d922c415b91,Namespace:kube-system,Attempt:0,}" Jul 14 23:12:30.186846 env[1250]: time="2025-07-14T23:12:30.186817446Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vjmsz,Uid:65aa8c25-c100-4c4d-b765-2e9deaf1c86c,Namespace:kube-system,Attempt:0,}" Jul 14 23:12:30.755382 env[1250]: time="2025-07-14T23:12:30.755324688Z" level=error msg="Failed to destroy network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.756889 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2-shm.mount: Deactivated successfully. Jul 14 23:12:30.757905 env[1250]: time="2025-07-14T23:12:30.757872683Z" level=error msg="encountered an error cleaning up failed sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.757948 env[1250]: time="2025-07-14T23:12:30.757922135Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-ff54b7cbb-m45xx,Uid:a344ebf2-1f08-4992-af9c-40b717e107d2,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.758121 kubelet[2104]: E0714 23:12:30.758096 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.762365 env[1250]: time="2025-07-14T23:12:30.762329577Z" level=error msg="Failed to destroy network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.763751 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34-shm.mount: Deactivated successfully. Jul 14 23:12:30.764959 env[1250]: time="2025-07-14T23:12:30.764932782Z" level=error msg="encountered an error cleaning up failed sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.765052 env[1250]: time="2025-07-14T23:12:30.765034775Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qt22r,Uid:68c74c57-331c-447e-bf00-1d922c415b91,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.765275 kubelet[2104]: E0714 23:12:30.765247 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.765326 kubelet[2104]: E0714 23:12:30.765301 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-qt22r" Jul 14 23:12:30.765352 kubelet[2104]: E0714 23:12:30.765321 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-qt22r" Jul 14 23:12:30.765394 kubelet[2104]: E0714 23:12:30.765359 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-qt22r_kube-system(68c74c57-331c-447e-bf00-1d922c415b91)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-qt22r_kube-system(68c74c57-331c-447e-bf00-1d922c415b91)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-qt22r" podUID="68c74c57-331c-447e-bf00-1d922c415b91" Jul 14 23:12:30.772774 kubelet[2104]: E0714 23:12:30.772741 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" Jul 14 23:12:30.772774 kubelet[2104]: E0714 23:12:30.772778 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" Jul 14 23:12:30.773792 kubelet[2104]: E0714 23:12:30.772809 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-ff54b7cbb-m45xx_calico-system(a344ebf2-1f08-4992-af9c-40b717e107d2)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-ff54b7cbb-m45xx_calico-system(a344ebf2-1f08-4992-af9c-40b717e107d2)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" podUID="a344ebf2-1f08-4992-af9c-40b717e107d2" Jul 14 23:12:30.775460 env[1250]: time="2025-07-14T23:12:30.775407885Z" level=error msg="Failed to destroy network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.776954 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8-shm.mount: Deactivated successfully. Jul 14 23:12:30.777832 env[1250]: time="2025-07-14T23:12:30.777804141Z" level=error msg="encountered an error cleaning up failed sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.777933 env[1250]: time="2025-07-14T23:12:30.777913306Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7c847fc58f-bpmwn,Uid:1da8b3e4-5379-453c-91ee-94146b265671,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.778202 kubelet[2104]: E0714 23:12:30.778178 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.778255 kubelet[2104]: E0714 23:12:30.778215 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7c847fc58f-bpmwn" Jul 14 23:12:30.778255 kubelet[2104]: E0714 23:12:30.778228 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-7c847fc58f-bpmwn" Jul 14 23:12:30.778303 kubelet[2104]: E0714 23:12:30.778266 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-7c847fc58f-bpmwn_calico-system(1da8b3e4-5379-453c-91ee-94146b265671)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-7c847fc58f-bpmwn_calico-system(1da8b3e4-5379-453c-91ee-94146b265671)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7c847fc58f-bpmwn" podUID="1da8b3e4-5379-453c-91ee-94146b265671" Jul 14 23:12:30.781315 env[1250]: time="2025-07-14T23:12:30.781280689Z" level=error msg="Failed to destroy network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.782870 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d-shm.mount: Deactivated successfully. Jul 14 23:12:30.783949 env[1250]: time="2025-07-14T23:12:30.783917584Z" level=error msg="encountered an error cleaning up failed sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.784045 env[1250]: time="2025-07-14T23:12:30.784028487Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-grs5p,Uid:6e2ec9ce-0970-462d-a8cb-5fe0646db8b4,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.784318 kubelet[2104]: E0714 23:12:30.784292 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.784371 kubelet[2104]: E0714 23:12:30.784331 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" Jul 14 23:12:30.784371 kubelet[2104]: E0714 23:12:30.784348 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" Jul 14 23:12:30.784438 kubelet[2104]: E0714 23:12:30.784391 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-866fb9ff9d-grs5p_calico-apiserver(6e2ec9ce-0970-462d-a8cb-5fe0646db8b4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-866fb9ff9d-grs5p_calico-apiserver(6e2ec9ce-0970-462d-a8cb-5fe0646db8b4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" podUID="6e2ec9ce-0970-462d-a8cb-5fe0646db8b4" Jul 14 23:12:30.803540 env[1250]: time="2025-07-14T23:12:30.803502453Z" level=error msg="Failed to destroy network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.803890 env[1250]: time="2025-07-14T23:12:30.803872748Z" level=error msg="encountered an error cleaning up failed sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812432 env[1250]: time="2025-07-14T23:12:30.803968526Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vjmsz,Uid:65aa8c25-c100-4c4d-b765-2e9deaf1c86c,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812432 env[1250]: time="2025-07-14T23:12:30.805770170Z" level=error msg="Failed to destroy network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812432 env[1250]: time="2025-07-14T23:12:30.805947192Z" level=error msg="encountered an error cleaning up failed sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812432 env[1250]: time="2025-07-14T23:12:30.805970380Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-zmphk,Uid:a08d23a3-9e4e-42f3-9191-147690a8736b,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812604 kubelet[2104]: E0714 23:12:30.804118 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812604 kubelet[2104]: E0714 23:12:30.804171 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-vjmsz" Jul 14 23:12:30.812604 kubelet[2104]: E0714 23:12:30.804185 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-vjmsz" Jul 14 23:12:30.812691 kubelet[2104]: E0714 23:12:30.804220 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-vjmsz_kube-system(65aa8c25-c100-4c4d-b765-2e9deaf1c86c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-vjmsz_kube-system(65aa8c25-c100-4c4d-b765-2e9deaf1c86c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-vjmsz" podUID="65aa8c25-c100-4c4d-b765-2e9deaf1c86c" Jul 14 23:12:30.812691 kubelet[2104]: E0714 23:12:30.806048 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.812691 kubelet[2104]: E0714 23:12:30.806069 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" Jul 14 23:12:30.812773 kubelet[2104]: E0714 23:12:30.806080 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" Jul 14 23:12:30.812773 kubelet[2104]: E0714 23:12:30.806096 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-866fb9ff9d-zmphk_calico-apiserver(a08d23a3-9e4e-42f3-9191-147690a8736b)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-866fb9ff9d-zmphk_calico-apiserver(a08d23a3-9e4e-42f3-9191-147690a8736b)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" podUID="a08d23a3-9e4e-42f3-9191-147690a8736b" Jul 14 23:12:30.814259 env[1250]: time="2025-07-14T23:12:30.814225790Z" level=error msg="Failed to destroy network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.814521 env[1250]: time="2025-07-14T23:12:30.814488364Z" level=error msg="encountered an error cleaning up failed sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.814595 env[1250]: time="2025-07-14T23:12:30.814539545Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-mng8c,Uid:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.814698 kubelet[2104]: E0714 23:12:30.814673 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.814737 kubelet[2104]: E0714 23:12:30.814709 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-mng8c" Jul 14 23:12:30.814737 kubelet[2104]: E0714 23:12:30.814721 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-mng8c" Jul 14 23:12:30.814783 kubelet[2104]: E0714 23:12:30.814750 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-mng8c_calico-system(1a21ac09-ca35-4722-b2a3-bce6c2fba7ee)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-mng8c_calico-system(1a21ac09-ca35-4722-b2a3-bce6c2fba7ee)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-mng8c" podUID="1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" Jul 14 23:12:30.886557 systemd[1]: Created slice kubepods-besteffort-pod77278217_2907_4c17_b495_1275ac4f971e.slice. Jul 14 23:12:30.888778 env[1250]: time="2025-07-14T23:12:30.888745363Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k88bl,Uid:77278217-2907-4c17-b495-1275ac4f971e,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:30.939911 kubelet[2104]: I0714 23:12:30.939479 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:12:30.940907 kubelet[2104]: I0714 23:12:30.940307 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:12:30.940907 kubelet[2104]: I0714 23:12:30.940825 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:12:30.946410 kubelet[2104]: I0714 23:12:30.941484 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:12:30.946410 kubelet[2104]: I0714 23:12:30.942150 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:12:30.946410 kubelet[2104]: I0714 23:12:30.942651 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:30.946410 kubelet[2104]: I0714 23:12:30.943144 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:12:30.948149 env[1250]: time="2025-07-14T23:12:30.948125585Z" level=info msg="StopPodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\"" Jul 14 23:12:30.948355 env[1250]: time="2025-07-14T23:12:30.948333786Z" level=info msg="StopPodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\"" Jul 14 23:12:30.948640 env[1250]: time="2025-07-14T23:12:30.948622940Z" level=info msg="StopPodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\"" Jul 14 23:12:30.948865 env[1250]: time="2025-07-14T23:12:30.948849013Z" level=info msg="StopPodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\"" Jul 14 23:12:30.949030 env[1250]: time="2025-07-14T23:12:30.949015977Z" level=info msg="StopPodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\"" Jul 14 23:12:30.949216 env[1250]: time="2025-07-14T23:12:30.949202118Z" level=info msg="StopPodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\"" Jul 14 23:12:30.949361 env[1250]: time="2025-07-14T23:12:30.949347252Z" level=info msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" Jul 14 23:12:30.990788 env[1250]: time="2025-07-14T23:12:30.990743994Z" level=error msg="StopPodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" failed" error="failed to destroy network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:30.991116 kubelet[2104]: E0714 23:12:30.990978 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:12:30.991116 kubelet[2104]: E0714 23:12:30.991026 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f"} Jul 14 23:12:30.991116 kubelet[2104]: E0714 23:12:30.991081 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a08d23a3-9e4e-42f3-9191-147690a8736b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:30.991116 kubelet[2104]: E0714 23:12:30.991098 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a08d23a3-9e4e-42f3-9191-147690a8736b\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" podUID="a08d23a3-9e4e-42f3-9191-147690a8736b" Jul 14 23:12:31.018297 env[1250]: time="2025-07-14T23:12:31.015692095Z" level=error msg="StopPodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" failed" error="failed to destroy network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.018637 kubelet[2104]: E0714 23:12:31.018513 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:12:31.018637 kubelet[2104]: E0714 23:12:31.018552 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6"} Jul 14 23:12:31.018637 kubelet[2104]: E0714 23:12:31.018594 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.018637 kubelet[2104]: E0714 23:12:31.018612 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-mng8c" podUID="1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" Jul 14 23:12:31.050609 env[1250]: time="2025-07-14T23:12:31.050567135Z" level=error msg="StopPodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" failed" error="failed to destroy network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.050757 kubelet[2104]: E0714 23:12:31.050729 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:12:31.050812 kubelet[2104]: E0714 23:12:31.050770 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d"} Jul 14 23:12:31.050812 kubelet[2104]: E0714 23:12:31.050797 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.050897 kubelet[2104]: E0714 23:12:31.050816 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" podUID="6e2ec9ce-0970-462d-a8cb-5fe0646db8b4" Jul 14 23:12:31.052625 env[1250]: time="2025-07-14T23:12:31.052597975Z" level=error msg="StopPodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" failed" error="failed to destroy network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.052963 env[1250]: time="2025-07-14T23:12:31.052671552Z" level=error msg="StopPodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" failed" error="failed to destroy network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.053196 kubelet[2104]: E0714 23:12:31.053091 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:12:31.053196 kubelet[2104]: E0714 23:12:31.053129 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34"} Jul 14 23:12:31.053196 kubelet[2104]: E0714 23:12:31.053151 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"68c74c57-331c-447e-bf00-1d922c415b91\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.053196 kubelet[2104]: E0714 23:12:31.053166 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"68c74c57-331c-447e-bf00-1d922c415b91\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-qt22r" podUID="68c74c57-331c-447e-bf00-1d922c415b91" Jul 14 23:12:31.053388 kubelet[2104]: E0714 23:12:31.053091 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:12:31.053388 kubelet[2104]: E0714 23:12:31.053194 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2"} Jul 14 23:12:31.053388 kubelet[2104]: E0714 23:12:31.053210 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"a344ebf2-1f08-4992-af9c-40b717e107d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.053388 kubelet[2104]: E0714 23:12:31.053223 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"a344ebf2-1f08-4992-af9c-40b717e107d2\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" podUID="a344ebf2-1f08-4992-af9c-40b717e107d2" Jul 14 23:12:31.056859 env[1250]: time="2025-07-14T23:12:31.056727560Z" level=error msg="StopPodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" failed" error="failed to destroy network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.056939 env[1250]: time="2025-07-14T23:12:31.056764622Z" level=error msg="Failed to destroy network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.057214 kubelet[2104]: E0714 23:12:31.057103 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:12:31.057214 kubelet[2104]: E0714 23:12:31.057131 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8"} Jul 14 23:12:31.057214 kubelet[2104]: E0714 23:12:31.057172 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1da8b3e4-5379-453c-91ee-94146b265671\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.057214 kubelet[2104]: E0714 23:12:31.057196 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1da8b3e4-5379-453c-91ee-94146b265671\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-7c847fc58f-bpmwn" podUID="1da8b3e4-5379-453c-91ee-94146b265671" Jul 14 23:12:31.057380 kubelet[2104]: E0714 23:12:31.057304 2104 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.057380 kubelet[2104]: E0714 23:12:31.057325 2104 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:31.057380 kubelet[2104]: E0714 23:12:31.057339 2104 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-k88bl" Jul 14 23:12:31.059308 env[1250]: time="2025-07-14T23:12:31.057206622Z" level=error msg="encountered an error cleaning up failed sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.059308 env[1250]: time="2025-07-14T23:12:31.057233595Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k88bl,Uid:77278217-2907-4c17-b495-1275ac4f971e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.059308 env[1250]: time="2025-07-14T23:12:31.058725595Z" level=error msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" failed" error="failed to destroy network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.063210 kubelet[2104]: E0714 23:12:31.057363 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-k88bl_calico-system(77278217-2907-4c17-b495-1275ac4f971e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-k88bl_calico-system(77278217-2907-4c17-b495-1275ac4f971e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:31.063210 kubelet[2104]: E0714 23:12:31.058873 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:31.063210 kubelet[2104]: E0714 23:12:31.058918 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07"} Jul 14 23:12:31.063210 kubelet[2104]: E0714 23:12:31.058937 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.063345 kubelet[2104]: E0714 23:12:31.058963 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-vjmsz" podUID="65aa8c25-c100-4c4d-b765-2e9deaf1c86c" Jul 14 23:12:31.585179 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07-shm.mount: Deactivated successfully. Jul 14 23:12:31.585262 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6-shm.mount: Deactivated successfully. Jul 14 23:12:31.585314 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f-shm.mount: Deactivated successfully. Jul 14 23:12:31.946390 kubelet[2104]: I0714 23:12:31.946058 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:12:31.949212 env[1250]: time="2025-07-14T23:12:31.947525898Z" level=info msg="StopPodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\"" Jul 14 23:12:31.982337 env[1250]: time="2025-07-14T23:12:31.982296721Z" level=error msg="StopPodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" failed" error="failed to destroy network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:31.982671 kubelet[2104]: E0714 23:12:31.982572 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:12:31.982671 kubelet[2104]: E0714 23:12:31.982603 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f"} Jul 14 23:12:31.982671 kubelet[2104]: E0714 23:12:31.982632 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"77278217-2907-4c17-b495-1275ac4f971e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:31.982671 kubelet[2104]: E0714 23:12:31.982648 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"77278217-2907-4c17-b495-1275ac4f971e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-k88bl" podUID="77278217-2907-4c17-b495-1275ac4f971e" Jul 14 23:12:38.663752 kubelet[2104]: I0714 23:12:38.663725 2104 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:12:40.164000 audit[3132]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:40.194492 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 23:12:40.205825 kernel: audit: type=1325 audit(1752534760.164:1023): table=filter:99 family=2 entries=21 op=nft_register_rule pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:40.212055 kernel: audit: type=1300 audit(1752534760.164:1023): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc024df110 a2=0 a3=7ffc024df0fc items=0 ppid=2207 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:40.218448 kernel: audit: type=1327 audit(1752534760.164:1023): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:40.218496 kernel: audit: type=1325 audit(1752534760.178:1024): table=nat:100 family=2 entries=19 op=nft_register_chain pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:40.218519 kernel: audit: type=1300 audit(1752534760.178:1024): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc024df110 a2=0 a3=7ffc024df0fc items=0 ppid=2207 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:40.224488 kernel: audit: type=1327 audit(1752534760.178:1024): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:40.164000 audit[3132]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc024df110 a2=0 a3=7ffc024df0fc items=0 ppid=2207 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:40.164000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:40.178000 audit[3132]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=3132 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:40.178000 audit[3132]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc024df110 a2=0 a3=7ffc024df0fc items=0 ppid=2207 pid=3132 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:40.178000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:41.169910 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount321205144.mount: Deactivated successfully. Jul 14 23:12:41.662906 env[1250]: time="2025-07-14T23:12:41.662859028Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:41.728160 env[1250]: time="2025-07-14T23:12:41.728123967Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:41.762218 env[1250]: time="2025-07-14T23:12:41.762184218Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:41.831335 env[1250]: time="2025-07-14T23:12:41.831308327Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:41.856472 env[1250]: time="2025-07-14T23:12:41.831574483Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 14 23:12:42.144770 env[1250]: time="2025-07-14T23:12:42.144735361Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 14 23:12:42.182275 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2580568938.mount: Deactivated successfully. Jul 14 23:12:42.197046 env[1250]: time="2025-07-14T23:12:42.197004112Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\"" Jul 14 23:12:42.203194 env[1250]: time="2025-07-14T23:12:42.203164238Z" level=info msg="StartContainer for \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\"" Jul 14 23:12:42.246560 systemd[1]: Started cri-containerd-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2.scope. Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.309833 kernel: audit: type=1400 audit(1752534762.274:1025): avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.309908 kernel: audit: type=1300 audit(1752534762.274:1025): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fa840226638 items=0 ppid=2554 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.309935 kernel: audit: type=1327 audit(1752534762.274:1025): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162316235326232326530313063353738373133353162353333623039 Jul 14 23:12:42.309958 kernel: audit: type=1400 audit(1752534762.274:1026): avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014d6b0 a2=3c a3=7fa840226638 items=0 ppid=2554 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162316235326232326530313063353738373133353162353333623039 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.274000 audit: BPF prog-id=139 op=LOAD Jul 14 23:12:42.274000 audit[3143]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014d9d8 a2=78 a3=c000255b88 items=0 ppid=2554 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162316235326232326530313063353738373133353162353333623039 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.280000 audit: BPF prog-id=140 op=LOAD Jul 14 23:12:42.280000 audit[3143]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014d770 a2=78 a3=c000255bd8 items=0 ppid=2554 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.280000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162316235326232326530313063353738373133353162353333623039 Jul 14 23:12:42.287000 audit: BPF prog-id=140 op=UNLOAD Jul 14 23:12:42.287000 audit: BPF prog-id=139 op=UNLOAD Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { perfmon } for pid=3143 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit[3143]: AVC avc: denied { bpf } for pid=3143 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:42.287000 audit: BPF prog-id=141 op=LOAD Jul 14 23:12:42.287000 audit[3143]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014dc30 a2=78 a3=c000255c68 items=0 ppid=2554 pid=3143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:42.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6162316235326232326530313063353738373133353162353333623039 Jul 14 23:12:42.329144 env[1250]: time="2025-07-14T23:12:42.306890421Z" level=info msg="StartContainer for \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\" returns successfully" Jul 14 23:12:43.177040 systemd[1]: run-containerd-runc-k8s.io-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2-runc.ALbqfv.mount: Deactivated successfully. Jul 14 23:12:43.311299 systemd[1]: run-containerd-runc-k8s.io-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2-runc.sPdK6g.mount: Deactivated successfully. Jul 14 23:12:43.893970 env[1250]: time="2025-07-14T23:12:43.893939897Z" level=info msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" Jul 14 23:12:43.945147 env[1250]: time="2025-07-14T23:12:43.945054416Z" level=error msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" failed" error="failed to destroy network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 14 23:12:43.949182 kubelet[2104]: E0714 23:12:43.949136 2104 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:43.950818 kubelet[2104]: E0714 23:12:43.950783 2104 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07"} Jul 14 23:12:43.952312 kubelet[2104]: E0714 23:12:43.952290 2104 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 14 23:12:43.962547 kubelet[2104]: E0714 23:12:43.962493 2104 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-vjmsz" podUID="65aa8c25-c100-4c4d-b765-2e9deaf1c86c" Jul 14 23:12:44.142688 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 14 23:12:44.142781 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 14 23:12:44.180208 systemd[1]: run-containerd-runc-k8s.io-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2-runc.TeQohH.mount: Deactivated successfully. Jul 14 23:12:44.428255 kubelet[2104]: I0714 23:12:44.407143 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-k8tcs" podStartSLOduration=4.039407962 podStartE2EDuration="30.380267253s" podCreationTimestamp="2025-07-14 23:12:14 +0000 UTC" firstStartedPulling="2025-07-14 23:12:15.491330798 +0000 UTC m=+17.705853902" lastFinishedPulling="2025-07-14 23:12:41.832190094 +0000 UTC m=+44.046713193" observedRunningTime="2025-07-14 23:12:43.266079736 +0000 UTC m=+45.480602856" watchObservedRunningTime="2025-07-14 23:12:44.380267253 +0000 UTC m=+46.594790365" Jul 14 23:12:44.428784 env[1250]: time="2025-07-14T23:12:44.428759117Z" level=info msg="StopPodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\"" Jul 14 23:12:44.879894 env[1250]: time="2025-07-14T23:12:44.879855517Z" level=info msg="StopPodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\"" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:44.586 [INFO][3259] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:44.586 [INFO][3259] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" iface="eth0" netns="/var/run/netns/cni-91719aaa-4141-3291-a746-b360705233fa" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:44.586 [INFO][3259] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" iface="eth0" netns="/var/run/netns/cni-91719aaa-4141-3291-a746-b360705233fa" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:44.587 [INFO][3259] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" iface="eth0" netns="/var/run/netns/cni-91719aaa-4141-3291-a746-b360705233fa" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:44.587 [INFO][3259] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:44.587 [INFO][3259] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.127 [INFO][3266] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.133 [INFO][3266] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.133 [INFO][3266] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.146 [WARNING][3266] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.146 [INFO][3266] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.147 [INFO][3266] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:45.157857 env[1250]: 2025-07-14 23:12:45.151 [INFO][3259] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:12:45.160224 systemd[1]: run-netns-cni\x2d91719aaa\x2d4141\x2d3291\x2da746\x2db360705233fa.mount: Deactivated successfully. Jul 14 23:12:45.161008 env[1250]: time="2025-07-14T23:12:45.160974874Z" level=info msg="TearDown network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" successfully" Jul 14 23:12:45.161070 env[1250]: time="2025-07-14T23:12:45.161056858Z" level=info msg="StopPodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" returns successfully" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:44.923 [INFO][3291] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:44.923 [INFO][3291] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" iface="eth0" netns="/var/run/netns/cni-97076ccd-cc27-badb-763e-8cd382522def" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:44.923 [INFO][3291] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" iface="eth0" netns="/var/run/netns/cni-97076ccd-cc27-badb-763e-8cd382522def" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:44.923 [INFO][3291] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" iface="eth0" netns="/var/run/netns/cni-97076ccd-cc27-badb-763e-8cd382522def" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:44.923 [INFO][3291] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:44.923 [INFO][3291] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.128 [INFO][3298] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.133 [INFO][3298] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.147 [INFO][3298] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.154 [WARNING][3298] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.154 [INFO][3298] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.156 [INFO][3298] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:45.164875 env[1250]: 2025-07-14 23:12:45.163 [INFO][3291] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:12:45.169007 env[1250]: time="2025-07-14T23:12:45.167861279Z" level=info msg="TearDown network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" successfully" Jul 14 23:12:45.169007 env[1250]: time="2025-07-14T23:12:45.167900954Z" level=info msg="StopPodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" returns successfully" Jul 14 23:12:45.166770 systemd[1]: run-netns-cni\x2d97076ccd\x2dcc27\x2dbadb\x2d763e\x2d8cd382522def.mount: Deactivated successfully. Jul 14 23:12:45.171794 env[1250]: time="2025-07-14T23:12:45.171768888Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-zmphk,Uid:a08d23a3-9e4e-42f3-9191-147690a8736b,Namespace:calico-apiserver,Attempt:1,}" Jul 14 23:12:45.234431 kubelet[2104]: I0714 23:12:45.234231 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-hf9cs\" (UniqueName: \"kubernetes.io/projected/1da8b3e4-5379-453c-91ee-94146b265671-kube-api-access-hf9cs\") pod \"1da8b3e4-5379-453c-91ee-94146b265671\" (UID: \"1da8b3e4-5379-453c-91ee-94146b265671\") " Jul 14 23:12:45.234431 kubelet[2104]: I0714 23:12:45.234316 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1da8b3e4-5379-453c-91ee-94146b265671-whisker-backend-key-pair\") pod \"1da8b3e4-5379-453c-91ee-94146b265671\" (UID: \"1da8b3e4-5379-453c-91ee-94146b265671\") " Jul 14 23:12:45.234431 kubelet[2104]: I0714 23:12:45.234344 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1da8b3e4-5379-453c-91ee-94146b265671-whisker-ca-bundle\") pod \"1da8b3e4-5379-453c-91ee-94146b265671\" (UID: \"1da8b3e4-5379-453c-91ee-94146b265671\") " Jul 14 23:12:45.276526 systemd[1]: var-lib-kubelet-pods-1da8b3e4\x2d5379\x2d453c\x2d91ee\x2d94146b265671-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dhf9cs.mount: Deactivated successfully. Jul 14 23:12:45.280227 systemd[1]: var-lib-kubelet-pods-1da8b3e4\x2d5379\x2d453c\x2d91ee\x2d94146b265671-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 23:12:45.281816 kubelet[2104]: I0714 23:12:45.280170 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1da8b3e4-5379-453c-91ee-94146b265671-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "1da8b3e4-5379-453c-91ee-94146b265671" (UID: "1da8b3e4-5379-453c-91ee-94146b265671"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 14 23:12:45.281907 kubelet[2104]: I0714 23:12:45.277366 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1da8b3e4-5379-453c-91ee-94146b265671-kube-api-access-hf9cs" (OuterVolumeSpecName: "kube-api-access-hf9cs") pod "1da8b3e4-5379-453c-91ee-94146b265671" (UID: "1da8b3e4-5379-453c-91ee-94146b265671"). InnerVolumeSpecName "kube-api-access-hf9cs". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:12:45.282105 kubelet[2104]: I0714 23:12:45.282082 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1da8b3e4-5379-453c-91ee-94146b265671-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "1da8b3e4-5379-453c-91ee-94146b265671" (UID: "1da8b3e4-5379-453c-91ee-94146b265671"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:12:45.334692 kubelet[2104]: I0714 23:12:45.334668 2104 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/1da8b3e4-5379-453c-91ee-94146b265671-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 23:12:45.334692 kubelet[2104]: I0714 23:12:45.334689 2104 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1da8b3e4-5379-453c-91ee-94146b265671-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 23:12:45.334692 kubelet[2104]: I0714 23:12:45.334695 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-hf9cs\" (UniqueName: \"kubernetes.io/projected/1da8b3e4-5379-453c-91ee-94146b265671-kube-api-access-hf9cs\") on node \"localhost\" DevicePath \"\"" Jul 14 23:12:45.369986 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:45.370335 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali60db47f240a: link becomes ready Jul 14 23:12:45.374385 systemd-networkd[1061]: cali60db47f240a: Link UP Jul 14 23:12:45.375603 systemd-networkd[1061]: cali60db47f240a: Gained carrier Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.249 [INFO][3307] cni-plugin/utils.go 100: File /var/lib/calico/mtu does not exist Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.261 [INFO][3307] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0 calico-apiserver-866fb9ff9d- calico-apiserver a08d23a3-9e4e-42f3-9191-147690a8736b 895 0 2025-07-14 23:12:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:866fb9ff9d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-866fb9ff9d-zmphk eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali60db47f240a [] [] }} ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.262 [INFO][3307] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.291 [INFO][3320] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.291 [INFO][3320] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-866fb9ff9d-zmphk", "timestamp":"2025-07-14 23:12:45.291761599 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.291 [INFO][3320] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.292 [INFO][3320] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.292 [INFO][3320] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.298 [INFO][3320] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.314 [INFO][3320] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.317 [INFO][3320] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.317 [INFO][3320] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.319 [INFO][3320] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.319 [INFO][3320] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.320 [INFO][3320] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42 Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.326 [INFO][3320] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.332 [INFO][3320] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.332 [INFO][3320] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" host="localhost" Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.332 [INFO][3320] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:45.389506 env[1250]: 2025-07-14 23:12:45.332 [INFO][3320] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.391377 env[1250]: 2025-07-14 23:12:45.333 [INFO][3307] cni-plugin/k8s.go 418: Populated endpoint ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"a08d23a3-9e4e-42f3-9191-147690a8736b", ResourceVersion:"895", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-866fb9ff9d-zmphk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60db47f240a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:45.391377 env[1250]: 2025-07-14 23:12:45.333 [INFO][3307] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.391377 env[1250]: 2025-07-14 23:12:45.333 [INFO][3307] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali60db47f240a ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.391377 env[1250]: 2025-07-14 23:12:45.372 [INFO][3307] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.391377 env[1250]: 2025-07-14 23:12:45.372 [INFO][3307] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"a08d23a3-9e4e-42f3-9191-147690a8736b", ResourceVersion:"895", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42", Pod:"calico-apiserver-866fb9ff9d-zmphk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60db47f240a", MAC:"8e:95:2f:ed:3e:09", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:45.391377 env[1250]: 2025-07-14 23:12:45.387 [INFO][3307] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-zmphk" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:12:45.399832 env[1250]: time="2025-07-14T23:12:45.399761594Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:45.400011 env[1250]: time="2025-07-14T23:12:45.399839208Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:45.400011 env[1250]: time="2025-07-14T23:12:45.399865321Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:45.400112 env[1250]: time="2025-07-14T23:12:45.400079396Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42 pid=3344 runtime=io.containerd.runc.v2 Jul 14 23:12:45.415285 systemd[1]: Started cri-containerd-be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42.scope. Jul 14 23:12:45.435741 kernel: kauditd_printk_skb: 39 callbacks suppressed Jul 14 23:12:45.435838 kernel: audit: type=1400 audit(1752534765.427:1031): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.435862 kernel: audit: type=1400 audit(1752534765.427:1032): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.435876 kernel: audit: type=1400 audit(1752534765.427:1033): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.442800 kernel: audit: type=1400 audit(1752534765.427:1034): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.442835 kernel: audit: type=1400 audit(1752534765.427:1035): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.444734 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.449424 kernel: audit: type=1400 audit(1752534765.427:1036): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.453432 kernel: audit: type=1400 audit(1752534765.427:1037): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.457427 kernel: audit: type=1400 audit(1752534765.427:1038): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.427000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.461431 kernel: audit: type=1400 audit(1752534765.427:1039): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.430000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.464473 kernel: audit: type=1400 audit(1752534765.430:1040): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.430000 audit: BPF prog-id=142 op=LOAD Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3344 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265313033306664656338386463653137353364326138356563346532 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3344 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265313033306664656338386463653137353364326138356563346532 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit: BPF prog-id=143 op=LOAD Jul 14 23:12:45.443000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000390840 items=0 ppid=3344 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265313033306664656338386463653137353364326138356563346532 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit: BPF prog-id=144 op=LOAD Jul 14 23:12:45.443000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000390888 items=0 ppid=3344 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265313033306664656338386463653137353364326138356563346532 Jul 14 23:12:45.443000 audit: BPF prog-id=144 op=UNLOAD Jul 14 23:12:45.443000 audit: BPF prog-id=143 op=UNLOAD Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { perfmon } for pid=3354 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit[3354]: AVC avc: denied { bpf } for pid=3354 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:45.443000 audit: BPF prog-id=145 op=LOAD Jul 14 23:12:45.443000 audit[3354]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000390c98 items=0 ppid=3344 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.443000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6265313033306664656338386463653137353364326138356563346532 Jul 14 23:12:45.476462 env[1250]: time="2025-07-14T23:12:45.475391430Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-zmphk,Uid:a08d23a3-9e4e-42f3-9191-147690a8736b,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\"" Jul 14 23:12:45.479493 env[1250]: time="2025-07-14T23:12:45.479158602Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 23:12:45.772000 audit[3417]: AVC avc: denied { write } for pid=3417 comm="tee" name="fd" dev="proc" ino=37890 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.774000 audit[3421]: AVC avc: denied { write } for pid=3421 comm="tee" name="fd" dev="proc" ino=37893 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.775000 audit[3419]: AVC avc: denied { write } for pid=3419 comm="tee" name="fd" dev="proc" ino=37896 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.775000 audit[3429]: AVC avc: denied { write } for pid=3429 comm="tee" name="fd" dev="proc" ino=37081 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.775000 audit[3429]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffd45f57da a2=241 a3=1b6 items=1 ppid=3386 pid=3429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.775000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 23:12:45.775000 audit: PATH item=0 name="/dev/fd/63" inode=36862 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.775000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.775000 audit[3419]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff6e10b7e9 a2=241 a3=1b6 items=1 ppid=3393 pid=3419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.775000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 23:12:45.775000 audit: PATH item=0 name="/dev/fd/63" inode=36860 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.774000 audit[3421]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff4c8817d9 a2=241 a3=1b6 items=1 ppid=3400 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.775000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.774000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 23:12:45.774000 audit: PATH item=0 name="/dev/fd/63" inode=36861 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.774000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.772000 audit[3417]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffcfb4797eb a2=241 a3=1b6 items=1 ppid=3388 pid=3417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.772000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 23:12:45.772000 audit: PATH item=0 name="/dev/fd/63" inode=36859 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.772000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.776000 audit[3426]: AVC avc: denied { write } for pid=3426 comm="tee" name="fd" dev="proc" ino=37085 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.776000 audit[3426]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffb4d0c7e9 a2=241 a3=1b6 items=1 ppid=3392 pid=3426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.776000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 23:12:45.776000 audit: PATH item=0 name="/dev/fd/63" inode=37077 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.776000 audit[3431]: AVC avc: denied { write } for pid=3431 comm="tee" name="fd" dev="proc" ino=37902 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.776000 audit[3431]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd85ff07e9 a2=241 a3=1b6 items=1 ppid=3385 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.776000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 23:12:45.776000 audit: PATH item=0 name="/dev/fd/63" inode=36863 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.776000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.777000 audit[3433]: AVC avc: denied { write } for pid=3433 comm="tee" name="fd" dev="proc" ino=37906 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:12:45.777000 audit[3433]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff5c6107ea a2=241 a3=1b6 items=1 ppid=3390 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:45.777000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 23:12:45.777000 audit: PATH item=0 name="/dev/fd/63" inode=37078 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:12:45.777000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:12:45.880038 env[1250]: time="2025-07-14T23:12:45.879937853Z" level=info msg="StopPodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\"" Jul 14 23:12:45.880540 env[1250]: time="2025-07-14T23:12:45.880114380Z" level=info msg="StopPodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\"" Jul 14 23:12:45.881463 env[1250]: time="2025-07-14T23:12:45.880132752Z" level=info msg="StopPodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\"" Jul 14 23:12:45.882358 env[1250]: time="2025-07-14T23:12:45.880160917Z" level=info msg="StopPodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\"" Jul 14 23:12:45.882358 env[1250]: time="2025-07-14T23:12:45.880177056Z" level=info msg="StopPodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\"" Jul 14 23:12:45.911462 systemd[1]: Removed slice kubepods-besteffort-pod1da8b3e4_5379_453c_91ee_94146b265671.slice. Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.044 [INFO][3500] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.044 [INFO][3500] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" iface="eth0" netns="/var/run/netns/cni-53ebe3ba-c754-76d0-191f-4c9c6efc9332" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.044 [INFO][3500] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" iface="eth0" netns="/var/run/netns/cni-53ebe3ba-c754-76d0-191f-4c9c6efc9332" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.045 [INFO][3500] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" iface="eth0" netns="/var/run/netns/cni-53ebe3ba-c754-76d0-191f-4c9c6efc9332" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.045 [INFO][3500] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.045 [INFO][3500] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.090 [INFO][3538] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.090 [INFO][3538] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.090 [INFO][3538] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.118 [WARNING][3538] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.118 [INFO][3538] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.123 [INFO][3538] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.129269 env[1250]: 2025-07-14 23:12:46.127 [INFO][3500] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:12:46.133028 env[1250]: time="2025-07-14T23:12:46.129391408Z" level=info msg="TearDown network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" successfully" Jul 14 23:12:46.133028 env[1250]: time="2025-07-14T23:12:46.129431672Z" level=info msg="StopPodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" returns successfully" Jul 14 23:12:46.143488 env[1250]: time="2025-07-14T23:12:46.143463151Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-ff54b7cbb-m45xx,Uid:a344ebf2-1f08-4992-af9c-40b717e107d2,Namespace:calico-system,Attempt:1,}" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.092 [INFO][3526] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.092 [INFO][3526] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" iface="eth0" netns="/var/run/netns/cni-b2cfbdbb-0e38-76a8-0462-45b942646002" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.092 [INFO][3526] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" iface="eth0" netns="/var/run/netns/cni-b2cfbdbb-0e38-76a8-0462-45b942646002" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.093 [INFO][3526] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" iface="eth0" netns="/var/run/netns/cni-b2cfbdbb-0e38-76a8-0462-45b942646002" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.093 [INFO][3526] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.093 [INFO][3526] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.137 [INFO][3552] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.138 [INFO][3552] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.138 [INFO][3552] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.145 [WARNING][3552] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.145 [INFO][3552] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.147 [INFO][3552] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.150146 env[1250]: 2025-07-14 23:12:46.148 [INFO][3526] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:12:46.160635 env[1250]: time="2025-07-14T23:12:46.150478077Z" level=info msg="TearDown network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" successfully" Jul 14 23:12:46.160635 env[1250]: time="2025-07-14T23:12:46.150496415Z" level=info msg="StopPodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" returns successfully" Jul 14 23:12:46.160635 env[1250]: time="2025-07-14T23:12:46.150865117Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-grs5p,Uid:6e2ec9ce-0970-462d-a8cb-5fe0646db8b4,Namespace:calico-apiserver,Attempt:1,}" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.103 [INFO][3510] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.103 [INFO][3510] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" iface="eth0" netns="/var/run/netns/cni-10c0c286-2b48-6705-28de-6a039e8436cc" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.103 [INFO][3510] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" iface="eth0" netns="/var/run/netns/cni-10c0c286-2b48-6705-28de-6a039e8436cc" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.103 [INFO][3510] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" iface="eth0" netns="/var/run/netns/cni-10c0c286-2b48-6705-28de-6a039e8436cc" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.103 [INFO][3510] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.103 [INFO][3510] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.153 [INFO][3558] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.153 [INFO][3558] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.154 [INFO][3558] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.160 [WARNING][3558] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.160 [INFO][3558] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.163 [INFO][3558] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.170013 env[1250]: 2025-07-14 23:12:46.168 [INFO][3510] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:12:46.174058 env[1250]: time="2025-07-14T23:12:46.170133550Z" level=info msg="TearDown network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" successfully" Jul 14 23:12:46.174058 env[1250]: time="2025-07-14T23:12:46.170152332Z" level=info msg="StopPodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" returns successfully" Jul 14 23:12:46.174058 env[1250]: time="2025-07-14T23:12:46.170526373Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k88bl,Uid:77278217-2907-4c17-b495-1275ac4f971e,Namespace:calico-system,Attempt:1,}" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.119 [INFO][3506] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.119 [INFO][3506] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" iface="eth0" netns="/var/run/netns/cni-ef060431-f5ab-211e-db7d-8850914f6589" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.120 [INFO][3506] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" iface="eth0" netns="/var/run/netns/cni-ef060431-f5ab-211e-db7d-8850914f6589" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.123 [INFO][3506] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" iface="eth0" netns="/var/run/netns/cni-ef060431-f5ab-211e-db7d-8850914f6589" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.123 [INFO][3506] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.123 [INFO][3506] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.183 [INFO][3564] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.183 [INFO][3564] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.183 [INFO][3564] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.190 [WARNING][3564] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.190 [INFO][3564] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.191 [INFO][3564] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.197701 env[1250]: 2025-07-14 23:12:46.194 [INFO][3506] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:12:46.199286 env[1250]: time="2025-07-14T23:12:46.199263899Z" level=info msg="TearDown network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" successfully" Jul 14 23:12:46.199364 env[1250]: time="2025-07-14T23:12:46.199352157Z" level=info msg="StopPodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" returns successfully" Jul 14 23:12:46.200595 env[1250]: time="2025-07-14T23:12:46.200565190Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-mng8c,Uid:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee,Namespace:calico-system,Attempt:1,}" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.127 [INFO][3522] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.128 [INFO][3522] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" iface="eth0" netns="/var/run/netns/cni-b7aa19f8-89e0-f718-b638-c2e10e18d6e8" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.128 [INFO][3522] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" iface="eth0" netns="/var/run/netns/cni-b7aa19f8-89e0-f718-b638-c2e10e18d6e8" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.128 [INFO][3522] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" iface="eth0" netns="/var/run/netns/cni-b7aa19f8-89e0-f718-b638-c2e10e18d6e8" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.128 [INFO][3522] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.128 [INFO][3522] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.186 [INFO][3567] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.186 [INFO][3567] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.191 [INFO][3567] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.195 [WARNING][3567] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.195 [INFO][3567] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.196 [INFO][3567] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.204215 env[1250]: 2025-07-14 23:12:46.201 [INFO][3522] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:12:46.213610 env[1250]: time="2025-07-14T23:12:46.204321682Z" level=info msg="TearDown network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" successfully" Jul 14 23:12:46.213610 env[1250]: time="2025-07-14T23:12:46.204340632Z" level=info msg="StopPodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" returns successfully" Jul 14 23:12:46.213610 env[1250]: time="2025-07-14T23:12:46.205241020Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qt22r,Uid:68c74c57-331c-447e-bf00-1d922c415b91,Namespace:kube-system,Attempt:1,}" Jul 14 23:12:46.217368 systemd[1]: run-netns-cni\x2d10c0c286\x2d2b48\x2d6705\x2d28de\x2d6a039e8436cc.mount: Deactivated successfully. Jul 14 23:12:46.217438 systemd[1]: run-netns-cni\x2db7aa19f8\x2d89e0\x2df718\x2db638\x2dc2e10e18d6e8.mount: Deactivated successfully. Jul 14 23:12:46.217475 systemd[1]: run-netns-cni\x2d53ebe3ba\x2dc754\x2d76d0\x2d191f\x2d4c9c6efc9332.mount: Deactivated successfully. Jul 14 23:12:46.217507 systemd[1]: run-netns-cni\x2def060431\x2df5ab\x2d211e\x2ddb7d\x2d8850914f6589.mount: Deactivated successfully. Jul 14 23:12:46.217538 systemd[1]: run-netns-cni\x2db2cfbdbb\x2d0e38\x2d76a8\x2d0462\x2d45b942646002.mount: Deactivated successfully. Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.377000 audit: BPF prog-id=146 op=LOAD Jul 14 23:12:46.377000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff90adc00 a2=98 a3=1fffffffffffffff items=0 ppid=3389 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.377000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.381000 audit: BPF prog-id=146 op=UNLOAD Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit: BPF prog-id=147 op=LOAD Jul 14 23:12:46.386000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff90adae0 a2=94 a3=3 items=0 ppid=3389 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.386000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.386000 audit: BPF prog-id=147 op=UNLOAD Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { bpf } for pid=3668 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit: BPF prog-id=148 op=LOAD Jul 14 23:12:46.386000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffff90adb20 a2=94 a3=7ffff90add00 items=0 ppid=3389 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.386000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.386000 audit: BPF prog-id=148 op=UNLOAD Jul 14 23:12:46.386000 audit[3668]: AVC avc: denied { perfmon } for pid=3668 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.386000 audit[3668]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffff90adbf0 a2=50 a3=a000000085 items=0 ppid=3389 pid=3668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.386000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.391000 audit: BPF prog-id=149 op=LOAD Jul 14 23:12:46.391000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffdc012cce0 a2=98 a3=3 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.391000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.391000 audit: BPF prog-id=149 op=UNLOAD Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.396000 audit: BPF prog-id=150 op=LOAD Jul 14 23:12:46.396000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc012cad0 a2=94 a3=54428f items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.396000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.396000 audit: BPF prog-id=150 op=UNLOAD Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.397000 audit: BPF prog-id=151 op=LOAD Jul 14 23:12:46.397000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc012cb00 a2=94 a3=2 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.397000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.397000 audit: BPF prog-id=151 op=UNLOAD Jul 14 23:12:46.529339 systemd-networkd[1061]: cali8784943ba53: Link UP Jul 14 23:12:46.534170 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:46.534259 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8784943ba53: link becomes ready Jul 14 23:12:46.534538 systemd-networkd[1061]: cali8784943ba53: Gained carrier Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.305 [INFO][3594] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0 calico-apiserver-866fb9ff9d- calico-apiserver 6e2ec9ce-0970-462d-a8cb-5fe0646db8b4 909 0 2025-07-14 23:12:12 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:866fb9ff9d projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-866fb9ff9d-grs5p eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali8784943ba53 [] [] }} ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.305 [INFO][3594] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.407 [INFO][3650] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.408 [INFO][3650] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000332390), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-866fb9ff9d-grs5p", "timestamp":"2025-07-14 23:12:46.407826913 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.408 [INFO][3650] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.408 [INFO][3650] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.408 [INFO][3650] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.438 [INFO][3650] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.475 [INFO][3650] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.483 [INFO][3650] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.486 [INFO][3650] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.497 [INFO][3650] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.497 [INFO][3650] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.503 [INFO][3650] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0 Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.510 [INFO][3650] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.525 [INFO][3650] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.525 [INFO][3650] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" host="localhost" Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.525 [INFO][3650] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.556996 env[1250]: 2025-07-14 23:12:46.525 [INFO][3650] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.557487 env[1250]: 2025-07-14 23:12:46.527 [INFO][3594] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4", ResourceVersion:"909", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-866fb9ff9d-grs5p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8784943ba53", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.557487 env[1250]: 2025-07-14 23:12:46.527 [INFO][3594] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.557487 env[1250]: 2025-07-14 23:12:46.527 [INFO][3594] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8784943ba53 ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.557487 env[1250]: 2025-07-14 23:12:46.535 [INFO][3594] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.557487 env[1250]: 2025-07-14 23:12:46.535 [INFO][3594] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4", ResourceVersion:"909", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0", Pod:"calico-apiserver-866fb9ff9d-grs5p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8784943ba53", MAC:"8e:ae:d7:ef:8e:99", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.557487 env[1250]: 2025-07-14 23:12:46.554 [INFO][3594] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Namespace="calico-apiserver" Pod="calico-apiserver-866fb9ff9d-grs5p" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:12:46.581093 kubelet[2104]: I0714 23:12:46.580995 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-ca-bundle\") pod \"whisker-7976686687-sr9b9\" (UID: \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\") " pod="calico-system/whisker-7976686687-sr9b9" Jul 14 23:12:46.581093 kubelet[2104]: I0714 23:12:46.581045 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-f5pkz\" (UniqueName: \"kubernetes.io/projected/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-kube-api-access-f5pkz\") pod \"whisker-7976686687-sr9b9\" (UID: \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\") " pod="calico-system/whisker-7976686687-sr9b9" Jul 14 23:12:46.581093 kubelet[2104]: I0714 23:12:46.581066 2104 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-backend-key-pair\") pod \"whisker-7976686687-sr9b9\" (UID: \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\") " pod="calico-system/whisker-7976686687-sr9b9" Jul 14 23:12:46.593101 systemd[1]: Created slice kubepods-besteffort-pod681c3e5d_7e9c_4690_8f31_b8e3038ba3d7.slice. Jul 14 23:12:46.598522 env[1250]: time="2025-07-14T23:12:46.595542556Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:46.598522 env[1250]: time="2025-07-14T23:12:46.595670788Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:46.598522 env[1250]: time="2025-07-14T23:12:46.595680169Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:46.598522 env[1250]: time="2025-07-14T23:12:46.595803153Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0 pid=3719 runtime=io.containerd.runc.v2 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit: BPF prog-id=152 op=LOAD Jul 14 23:12:46.622000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffdc012c9c0 a2=94 a3=1 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.622000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.622000 audit: BPF prog-id=152 op=UNLOAD Jul 14 23:12:46.622000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.622000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffdc012ca90 a2=50 a3=7ffdc012cb70 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.622000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc012c9d0 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc012ca00 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc012c910 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc012ca20 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc012ca00 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc012c9f0 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc012ca20 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc012ca00 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc012ca20 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffdc012c9f0 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.643000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.643000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffdc012ca60 a2=28 a3=0 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.643000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdc012c810 a2=50 a3=1 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.645000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit: BPF prog-id=153 op=LOAD Jul 14 23:12:46.645000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffdc012c810 a2=94 a3=5 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.645000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.645000 audit: BPF prog-id=153 op=UNLOAD Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffdc012c8c0 a2=50 a3=1 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.660494 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliefe5b2c4116: link becomes ready Jul 14 23:12:46.645000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffdc012c9e0 a2=4 a3=38 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.645000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.645000 audit[3674]: AVC avc: denied { confidentiality } for pid=3674 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.645000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc012ca30 a2=94 a3=6 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.645000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.647000 audit[3674]: AVC avc: denied { confidentiality } for pid=3674 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.647000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc012c1e0 a2=94 a3=88 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.647000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { perfmon } for pid=3674 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { bpf } for pid=3674 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.648000 audit[3674]: AVC avc: denied { confidentiality } for pid=3674 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:46.648000 audit[3674]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffdc012c1e0 a2=94 a3=88 items=0 ppid=3389 pid=3674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.648000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:12:46.621970 systemd[1]: Started cri-containerd-d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0.scope. Jul 14 23:12:46.659276 systemd-networkd[1061]: caliefe5b2c4116: Link UP Jul 14 23:12:46.660696 systemd-networkd[1061]: caliefe5b2c4116: Gained carrier Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.664000 audit: BPF prog-id=154 op=LOAD Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3719 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430376162336436343764383133633331636332383439656361353666 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3719 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430376162336436343764383133633331636332383439656361353666 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit: BPF prog-id=155 op=LOAD Jul 14 23:12:46.665000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011f9d8 a2=78 a3=c00036e370 items=0 ppid=3719 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430376162336436343764383133633331636332383439656361353666 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit: BPF prog-id=156 op=LOAD Jul 14 23:12:46.665000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00011f770 a2=78 a3=c00036e3b8 items=0 ppid=3719 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430376162336436343764383133633331636332383439656361353666 Jul 14 23:12:46.665000 audit: BPF prog-id=156 op=UNLOAD Jul 14 23:12:46.665000 audit: BPF prog-id=155 op=UNLOAD Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { perfmon } for pid=3730 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit[3730]: AVC avc: denied { bpf } for pid=3730 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.665000 audit: BPF prog-id=157 op=LOAD Jul 14 23:12:46.665000 audit[3730]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00011fc30 a2=78 a3=c00036e7c8 items=0 ppid=3719 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.665000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6430376162336436343764383133633331636332383439656361353666 Jul 14 23:12:46.670696 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.295 [INFO][3583] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0 calico-kube-controllers-ff54b7cbb- calico-system a344ebf2-1f08-4992-af9c-40b717e107d2 907 0 2025-07-14 23:12:15 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:ff54b7cbb projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-ff54b7cbb-m45xx eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] caliefe5b2c4116 [] [] }} ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.295 [INFO][3583] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.413 [INFO][3635] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.413 [INFO][3635] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad4b0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-ff54b7cbb-m45xx", "timestamp":"2025-07-14 23:12:46.413383637 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.413 [INFO][3635] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.525 [INFO][3635] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.525 [INFO][3635] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.536 [INFO][3635] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.576 [INFO][3635] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.582 [INFO][3635] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.585 [INFO][3635] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.590 [INFO][3635] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.590 [INFO][3635] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.609 [INFO][3635] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.617 [INFO][3635] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.632 [INFO][3635] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.632 [INFO][3635] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" host="localhost" Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.632 [INFO][3635] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.674524 env[1250]: 2025-07-14 23:12:46.632 [INFO][3635] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.676202 env[1250]: 2025-07-14 23:12:46.634 [INFO][3583] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0", GenerateName:"calico-kube-controllers-ff54b7cbb-", Namespace:"calico-system", SelfLink:"", UID:"a344ebf2-1f08-4992-af9c-40b717e107d2", ResourceVersion:"907", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"ff54b7cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-ff54b7cbb-m45xx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliefe5b2c4116", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.676202 env[1250]: 2025-07-14 23:12:46.635 [INFO][3583] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.676202 env[1250]: 2025-07-14 23:12:46.635 [INFO][3583] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliefe5b2c4116 ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.676202 env[1250]: 2025-07-14 23:12:46.661 [INFO][3583] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.676202 env[1250]: 2025-07-14 23:12:46.662 [INFO][3583] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0", GenerateName:"calico-kube-controllers-ff54b7cbb-", Namespace:"calico-system", SelfLink:"", UID:"a344ebf2-1f08-4992-af9c-40b717e107d2", ResourceVersion:"907", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"ff54b7cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea", Pod:"calico-kube-controllers-ff54b7cbb-m45xx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliefe5b2c4116", MAC:"76:08:18:a2:c3:91", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.676202 env[1250]: 2025-07-14 23:12:46.672 [INFO][3583] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Namespace="calico-system" Pod="calico-kube-controllers-ff54b7cbb-m45xx" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:12:46.689370 env[1250]: time="2025-07-14T23:12:46.689324487Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:46.689530 env[1250]: time="2025-07-14T23:12:46.689513175Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:46.689610 env[1250]: time="2025-07-14T23:12:46.689596171Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:46.689777 env[1250]: time="2025-07-14T23:12:46.689762043Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea pid=3759 runtime=io.containerd.runc.v2 Jul 14 23:12:46.709085 systemd[1]: Started cri-containerd-2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea.scope. Jul 14 23:12:46.729021 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali205612dceb4: link becomes ready Jul 14 23:12:46.724404 systemd-networkd[1061]: cali205612dceb4: Link UP Jul 14 23:12:46.725963 systemd-networkd[1061]: cali205612dceb4: Gained carrier Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.738000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.739000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.739000 audit: BPF prog-id=158 op=LOAD Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3759 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316663343061393265363935383536393463623138346562393331 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=3759 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316663343061393265363935383536393463623138346562393331 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit: BPF prog-id=159 op=LOAD Jul 14 23:12:46.741000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0001f5dd0 items=0 ppid=3759 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316663343061393265363935383536393463623138346562393331 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit: BPF prog-id=160 op=LOAD Jul 14 23:12:46.741000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0001f5e18 items=0 ppid=3759 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316663343061393265363935383536393463623138346562393331 Jul 14 23:12:46.741000 audit: BPF prog-id=160 op=UNLOAD Jul 14 23:12:46.741000 audit: BPF prog-id=159 op=UNLOAD Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { perfmon } for pid=3773 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit[3773]: AVC avc: denied { bpf } for pid=3773 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.741000 audit: BPF prog-id=161 op=LOAD Jul 14 23:12:46.741000 audit[3773]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003f6228 items=0 ppid=3759 pid=3773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.741000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3261316663343061393265363935383536393463623138346562393331 Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.320 [INFO][3602] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--k88bl-eth0 csi-node-driver- calico-system 77278217-2907-4c17-b495-1275ac4f971e 910 0 2025-07-14 23:12:15 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-k88bl eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali205612dceb4 [] [] }} ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.320 [INFO][3602] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.445 [INFO][3656] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" HandleID="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.446 [INFO][3656] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" HandleID="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd680), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-k88bl", "timestamp":"2025-07-14 23:12:46.445927237 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.446 [INFO][3656] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.632 [INFO][3656] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.633 [INFO][3656] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.641 [INFO][3656] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.676 [INFO][3656] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.684 [INFO][3656] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.688 [INFO][3656] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.691 [INFO][3656] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.691 [INFO][3656] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.693 [INFO][3656] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58 Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.706 [INFO][3656] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.717 [INFO][3656] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.717 [INFO][3656] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" host="localhost" Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.717 [INFO][3656] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.744662 env[1250]: 2025-07-14 23:12:46.717 [INFO][3656] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" HandleID="k8s-pod-network.b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.746812 env[1250]: 2025-07-14 23:12:46.722 [INFO][3602] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--k88bl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"77278217-2907-4c17-b495-1275ac4f971e", ResourceVersion:"910", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-k88bl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali205612dceb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.746812 env[1250]: 2025-07-14 23:12:46.722 [INFO][3602] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.746812 env[1250]: 2025-07-14 23:12:46.722 [INFO][3602] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali205612dceb4 ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.746812 env[1250]: 2025-07-14 23:12:46.728 [INFO][3602] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.746812 env[1250]: 2025-07-14 23:12:46.731 [INFO][3602] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--k88bl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"77278217-2907-4c17-b495-1275ac4f971e", ResourceVersion:"910", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58", Pod:"csi-node-driver-k88bl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali205612dceb4", MAC:"b6:da:e4:9e:d3:68", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.746812 env[1250]: 2025-07-14 23:12:46.741 [INFO][3602] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58" Namespace="calico-system" Pod="csi-node-driver-k88bl" WorkloadEndpoint="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:12:46.748521 env[1250]: time="2025-07-14T23:12:46.748466120Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-866fb9ff9d-grs5p,Uid:6e2ec9ce-0970-462d-a8cb-5fe0646db8b4,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\"" Jul 14 23:12:46.750551 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:46.755536 env[1250]: time="2025-07-14T23:12:46.755484898Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:46.755654 env[1250]: time="2025-07-14T23:12:46.755516948Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:46.755654 env[1250]: time="2025-07-14T23:12:46.755524205Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:46.755654 env[1250]: time="2025-07-14T23:12:46.755609033Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58 pid=3811 runtime=io.containerd.runc.v2 Jul 14 23:12:46.763799 systemd[1]: Started cri-containerd-b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58.scope. Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit: BPF prog-id=162 op=LOAD Jul 14 23:12:46.772000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3715b940 a2=98 a3=1999999999999999 items=0 ppid=3389 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.772000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:12:46.772000 audit: BPF prog-id=162 op=UNLOAD Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit: BPF prog-id=163 op=LOAD Jul 14 23:12:46.772000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3715b820 a2=94 a3=ffff items=0 ppid=3389 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.772000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:12:46.772000 audit: BPF prog-id=163 op=UNLOAD Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { perfmon } for pid=3835 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit[3835]: AVC avc: denied { bpf } for pid=3835 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.772000 audit: BPF prog-id=164 op=LOAD Jul 14 23:12:46.772000 audit[3835]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc3715b860 a2=94 a3=7ffc3715ba40 items=0 ppid=3389 pid=3835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.772000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:12:46.772000 audit: BPF prog-id=164 op=UNLOAD Jul 14 23:12:46.787050 env[1250]: time="2025-07-14T23:12:46.787024817Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-ff54b7cbb-m45xx,Uid:a344ebf2-1f08-4992-af9c-40b717e107d2,Namespace:calico-system,Attempt:1,} returns sandbox id \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\"" Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.797000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.798000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.798000 audit: BPF prog-id=165 op=LOAD Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3811 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373664363765303737303837366261356138393737323131656532 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3811 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373664363765303737303837366261356138393737323131656532 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit: BPF prog-id=166 op=LOAD Jul 14 23:12:46.799000 audit[3822]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002fdd90 items=0 ppid=3811 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373664363765303737303837366261356138393737323131656532 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit: BPF prog-id=167 op=LOAD Jul 14 23:12:46.799000 audit[3822]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002fddd8 items=0 ppid=3811 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373664363765303737303837366261356138393737323131656532 Jul 14 23:12:46.799000 audit: BPF prog-id=167 op=UNLOAD Jul 14 23:12:46.799000 audit: BPF prog-id=166 op=UNLOAD Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { perfmon } for pid=3822 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit[3822]: AVC avc: denied { bpf } for pid=3822 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.799000 audit: BPF prog-id=168 op=LOAD Jul 14 23:12:46.799000 audit[3822]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d81e8 items=0 ppid=3811 pid=3822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.799000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232373664363765303737303837366261356138393737323131656532 Jul 14 23:12:46.800985 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:46.809288 env[1250]: time="2025-07-14T23:12:46.809263910Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-k88bl,Uid:77278217-2907-4c17-b495-1275ac4f971e,Namespace:calico-system,Attempt:1,} returns sandbox id \"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58\"" Jul 14 23:12:46.826847 systemd-networkd[1061]: cali8888556bd85: Link UP Jul 14 23:12:46.829163 systemd-networkd[1061]: cali8888556bd85: Gained carrier Jul 14 23:12:46.829455 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali8888556bd85: link becomes ready Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.359 [INFO][3618] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--mng8c-eth0 goldmane-58fd7646b9- calico-system 1a21ac09-ca35-4722-b2a3-bce6c2fba7ee 911 0 2025-07-14 23:12:14 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-mng8c eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali8888556bd85 [] [] }} ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.359 [INFO][3618] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.471 [INFO][3670] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.471 [INFO][3670] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002519a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-mng8c", "timestamp":"2025-07-14 23:12:46.471206895 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.471 [INFO][3670] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.717 [INFO][3670] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.717 [INFO][3670] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.742 [INFO][3670] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.776 [INFO][3670] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.784 [INFO][3670] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.785 [INFO][3670] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.788 [INFO][3670] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.788 [INFO][3670] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.789 [INFO][3670] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789 Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.801 [INFO][3670] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.813 [INFO][3670] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.813 [INFO][3670] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" host="localhost" Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.813 [INFO][3670] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.838265 env[1250]: 2025-07-14 23:12:46.813 [INFO][3670] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.838989 env[1250]: 2025-07-14 23:12:46.814 [INFO][3618] cni-plugin/k8s.go 418: Populated endpoint ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--mng8c-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee", ResourceVersion:"911", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-mng8c", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8888556bd85", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.838989 env[1250]: 2025-07-14 23:12:46.815 [INFO][3618] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.838989 env[1250]: 2025-07-14 23:12:46.815 [INFO][3618] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali8888556bd85 ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.838989 env[1250]: 2025-07-14 23:12:46.827 [INFO][3618] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.838989 env[1250]: 2025-07-14 23:12:46.829 [INFO][3618] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--mng8c-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee", ResourceVersion:"911", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789", Pod:"goldmane-58fd7646b9-mng8c", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8888556bd85", MAC:"b2:2f:dc:a0:c3:af", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.838989 env[1250]: 2025-07-14 23:12:46.835 [INFO][3618] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Namespace="calico-system" Pod="goldmane-58fd7646b9-mng8c" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:12:46.849556 env[1250]: time="2025-07-14T23:12:46.849495033Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:46.849717 env[1250]: time="2025-07-14T23:12:46.849697684Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:46.849811 env[1250]: time="2025-07-14T23:12:46.849791796Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:46.850061 env[1250]: time="2025-07-14T23:12:46.850039269Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789 pid=3881 runtime=io.containerd.runc.v2 Jul 14 23:12:46.859375 systemd[1]: Started cri-containerd-955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789.scope. Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.873000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit: BPF prog-id=169 op=LOAD Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356564383633393935396333323834303563343734386630616634 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356564383633393935396333323834303563343734386630616634 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit: BPF prog-id=170 op=LOAD Jul 14 23:12:46.874000 audit[3890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002cdec0 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356564383633393935396333323834303563343734386630616634 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit: BPF prog-id=171 op=LOAD Jul 14 23:12:46.874000 audit[3890]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002cdf08 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356564383633393935396333323834303563343734386630616634 Jul 14 23:12:46.874000 audit: BPF prog-id=171 op=UNLOAD Jul 14 23:12:46.874000 audit: BPF prog-id=170 op=UNLOAD Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { perfmon } for pid=3890 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit[3890]: AVC avc: denied { bpf } for pid=3890 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:46.874000 audit: BPF prog-id=172 op=LOAD Jul 14 23:12:46.874000 audit[3890]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003c0318 items=0 ppid=3881 pid=3890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:46.874000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935356564383633393935396333323834303563343734386630616634 Jul 14 23:12:46.877525 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:46.904065 env[1250]: time="2025-07-14T23:12:46.903990028Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-mng8c,Uid:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee,Namespace:calico-system,Attempt:1,} returns sandbox id \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\"" Jul 14 23:12:46.909084 env[1250]: time="2025-07-14T23:12:46.907615028Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7976686687-sr9b9,Uid:681c3e5d-7e9c-4690-8f31-b8e3038ba3d7,Namespace:calico-system,Attempt:0,}" Jul 14 23:12:46.926578 systemd-networkd[1061]: cali2061ca1db2b: Link UP Jul 14 23:12:46.927884 systemd-networkd[1061]: cali2061ca1db2b: Gained carrier Jul 14 23:12:46.928503 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali2061ca1db2b: link becomes ready Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.428 [INFO][3620] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0 coredns-7c65d6cfc9- kube-system 68c74c57-331c-447e-bf00-1d922c415b91 913 0 2025-07-14 23:12:03 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-qt22r eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali2061ca1db2b [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.428 [INFO][3620] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.475 [INFO][3692] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.477 [INFO][3692] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-qt22r", "timestamp":"2025-07-14 23:12:46.475688759 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.477 [INFO][3692] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.813 [INFO][3692] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.813 [INFO][3692] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.843 [INFO][3692] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.876 [INFO][3692] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.884 [INFO][3692] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.886 [INFO][3692] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.888 [INFO][3692] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.888 [INFO][3692] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.889 [INFO][3692] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64 Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.896 [INFO][3692] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.906 [INFO][3692] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.906 [INFO][3692] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" host="localhost" Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.906 [INFO][3692] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:46.947149 env[1250]: 2025-07-14 23:12:46.906 [INFO][3692] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.947632 env[1250]: 2025-07-14 23:12:46.913 [INFO][3620] cni-plugin/k8s.go 418: Populated endpoint ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"68c74c57-331c-447e-bf00-1d922c415b91", ResourceVersion:"913", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-qt22r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2061ca1db2b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.947632 env[1250]: 2025-07-14 23:12:46.914 [INFO][3620] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.947632 env[1250]: 2025-07-14 23:12:46.914 [INFO][3620] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali2061ca1db2b ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.947632 env[1250]: 2025-07-14 23:12:46.928 [INFO][3620] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.947632 env[1250]: 2025-07-14 23:12:46.928 [INFO][3620] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"68c74c57-331c-447e-bf00-1d922c415b91", ResourceVersion:"913", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64", Pod:"coredns-7c65d6cfc9-qt22r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2061ca1db2b", MAC:"f2:21:e2:66:65:e5", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:46.947632 env[1250]: 2025-07-14 23:12:46.942 [INFO][3620] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Namespace="kube-system" Pod="coredns-7c65d6cfc9-qt22r" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:12:46.957950 systemd-networkd[1061]: vxlan.calico: Link UP Jul 14 23:12:46.957955 systemd-networkd[1061]: vxlan.calico: Gained carrier Jul 14 23:12:46.977683 env[1250]: time="2025-07-14T23:12:46.977580110Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:46.977683 env[1250]: time="2025-07-14T23:12:46.977622210Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:46.977683 env[1250]: time="2025-07-14T23:12:46.977631802Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:46.977919 env[1250]: time="2025-07-14T23:12:46.977782263Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64 pid=3935 runtime=io.containerd.runc.v2 Jul 14 23:12:46.987536 systemd[1]: Started cri-containerd-1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64.scope. Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit: BPF prog-id=173 op=LOAD Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3935 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333030333166316139383263303262343861613862333137303931 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=3935 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333030333166316139383263303262343861613862333137303931 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.011000 audit: BPF prog-id=174 op=LOAD Jul 14 23:12:47.011000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000211130 items=0 ppid=3935 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.011000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333030333166316139383263303262343861613862333137303931 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit: BPF prog-id=175 op=LOAD Jul 14 23:12:47.012000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000211178 items=0 ppid=3935 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333030333166316139383263303262343861613862333137303931 Jul 14 23:12:47.012000 audit: BPF prog-id=175 op=UNLOAD Jul 14 23:12:47.012000 audit: BPF prog-id=174 op=UNLOAD Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { perfmon } for pid=3951 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit[3951]: AVC avc: denied { bpf } for pid=3951 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.012000 audit: BPF prog-id=176 op=LOAD Jul 14 23:12:47.012000 audit[3951]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000211588 items=0 ppid=3935 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.012000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3136333030333166316139383263303262343861613862333137303931 Jul 14 23:12:47.020088 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.052000 audit: BPF prog-id=177 op=LOAD Jul 14 23:12:47.052000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff274e24c0 a2=98 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.052000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.052000 audit: BPF prog-id=177 op=UNLOAD Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit: BPF prog-id=178 op=LOAD Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff274e22d0 a2=94 a3=54428f items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit: BPF prog-id=178 op=UNLOAD Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit: BPF prog-id=179 op=LOAD Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff274e2300 a2=94 a3=2 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit: BPF prog-id=179 op=UNLOAD Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff274e21d0 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff274e2200 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff274e2110 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff274e2220 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff274e2200 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff274e21f0 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff274e2220 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff274e2200 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff274e2220 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff274e21f0 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff274e2260 a2=28 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit: BPF prog-id=180 op=LOAD Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff274e20d0 a2=94 a3=0 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.059000 audit: BPF prog-id=180 op=UNLOAD Jul 14 23:12:47.059000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.059000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff274e20c0 a2=50 a3=2800 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.059000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff274e20c0 a2=50 a3=2800 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.060000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit: BPF prog-id=181 op=LOAD Jul 14 23:12:47.060000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff274e18e0 a2=94 a3=2 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.060000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.060000 audit: BPF prog-id=181 op=UNLOAD Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { perfmon } for pid=3984 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit[3984]: AVC avc: denied { bpf } for pid=3984 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.060000 audit: BPF prog-id=182 op=LOAD Jul 14 23:12:47.060000 audit[3984]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff274e19e0 a2=94 a3=30 items=0 ppid=3389 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.060000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit: BPF prog-id=183 op=LOAD Jul 14 23:12:47.065000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffa14c14f0 a2=98 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.065000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.065000 audit: BPF prog-id=183 op=UNLOAD Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit: BPF prog-id=184 op=LOAD Jul 14 23:12:47.065000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffa14c12e0 a2=94 a3=54428f items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.065000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.065000 audit: BPF prog-id=184 op=UNLOAD Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.065000 audit: BPF prog-id=185 op=LOAD Jul 14 23:12:47.065000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffa14c1310 a2=94 a3=2 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.065000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.065000 audit: BPF prog-id=185 op=UNLOAD Jul 14 23:12:47.089966 env[1250]: time="2025-07-14T23:12:47.089935364Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-qt22r,Uid:68c74c57-331c-447e-bf00-1d922c415b91,Namespace:kube-system,Attempt:1,} returns sandbox id \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\"" Jul 14 23:12:47.111482 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibd3146c7eae: link becomes ready Jul 14 23:12:47.110219 systemd-networkd[1061]: calibd3146c7eae: Link UP Jul 14 23:12:47.111724 systemd-networkd[1061]: calibd3146c7eae: Gained carrier Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:46.975 [INFO][3917] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--7976686687--sr9b9-eth0 whisker-7976686687- calico-system 681c3e5d-7e9c-4690-8f31-b8e3038ba3d7 930 0 2025-07-14 23:12:46 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:7976686687 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-7976686687-sr9b9 eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calibd3146c7eae [] [] }} ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:46.975 [INFO][3917] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.038 [INFO][3950] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.038 [INFO][3950] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b740), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-7976686687-sr9b9", "timestamp":"2025-07-14 23:12:47.038564699 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.038 [INFO][3950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.038 [INFO][3950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.038 [INFO][3950] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.050 [INFO][3950] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.066 [INFO][3950] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.070 [INFO][3950] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.073 [INFO][3950] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.075 [INFO][3950] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.075 [INFO][3950] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.077 [INFO][3950] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065 Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.085 [INFO][3950] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.096 [INFO][3950] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.096 [INFO][3950] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" host="localhost" Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.096 [INFO][3950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:47.133910 env[1250]: 2025-07-14 23:12:47.096 [INFO][3950] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.137830 env[1250]: 2025-07-14 23:12:47.100 [INFO][3917] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7976686687--sr9b9-eth0", GenerateName:"whisker-7976686687-", Namespace:"calico-system", SelfLink:"", UID:"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7976686687", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-7976686687-sr9b9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calibd3146c7eae", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.137830 env[1250]: 2025-07-14 23:12:47.100 [INFO][3917] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.137830 env[1250]: 2025-07-14 23:12:47.100 [INFO][3917] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibd3146c7eae ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.137830 env[1250]: 2025-07-14 23:12:47.113 [INFO][3917] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.137830 env[1250]: 2025-07-14 23:12:47.113 [INFO][3917] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--7976686687--sr9b9-eth0", GenerateName:"whisker-7976686687-", Namespace:"calico-system", SelfLink:"", UID:"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7", ResourceVersion:"930", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 46, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"7976686687", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065", Pod:"whisker-7976686687-sr9b9", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calibd3146c7eae", MAC:"3a:e3:6d:6d:81:be", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:47.137830 env[1250]: 2025-07-14 23:12:47.131 [INFO][3917] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Namespace="calico-system" Pod="whisker-7976686687-sr9b9" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:12:47.150548 systemd-networkd[1061]: cali60db47f240a: Gained IPv6LL Jul 14 23:12:47.163905 env[1250]: time="2025-07-14T23:12:47.157629276Z" level=info msg="CreateContainer within sandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 23:12:47.196505 env[1250]: time="2025-07-14T23:12:47.195242784Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:47.196505 env[1250]: time="2025-07-14T23:12:47.195275418Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:47.196505 env[1250]: time="2025-07-14T23:12:47.195284594Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:47.196505 env[1250]: time="2025-07-14T23:12:47.195378586Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065 pid=4017 runtime=io.containerd.runc.v2 Jul 14 23:12:47.213300 systemd[1]: Started cri-containerd-c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065.scope. Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit: BPF prog-id=186 op=LOAD Jul 14 23:12:47.245000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fffa14c11d0 a2=94 a3=1 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.245000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.245000 audit: BPF prog-id=186 op=UNLOAD Jul 14 23:12:47.245000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.245000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fffa14c12a0 a2=50 a3=7fffa14c1380 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.245000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.255116 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount730951923.mount: Deactivated successfully. Jul 14 23:12:47.261279 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount88471358.mount: Deactivated successfully. Jul 14 23:12:47.264000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.264000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa14c11e0 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.264000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.264000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.264000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa14c1210 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.264000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.264000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.264000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa14c1120 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.264000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.264000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.264000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa14c1230 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.264000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.264000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.264000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa14c1210 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.264000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.264000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.264000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa14c1200 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.264000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265618 env[1250]: time="2025-07-14T23:12:47.265550422Z" level=info msg="CreateContainer within sandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\"" Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa14c1230 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa14c1210 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa14c1230 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fffa14c1200 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fffa14c1270 a2=28 a3=0 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffa14c1020 a2=50 a3=1 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit: BPF prog-id=187 op=LOAD Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fffa14c1020 a2=94 a3=5 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit: BPF prog-id=187 op=UNLOAD Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fffa14c10d0 a2=50 a3=1 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fffa14c11f0 a2=4 a3=38 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.265000 audit[3989]: AVC avc: denied { confidentiality } for pid=3989 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:47.265000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffa14c1240 a2=94 a3=6 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.265000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { confidentiality } for pid=3989 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:47.267000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffa14c09f0 a2=94 a3=88 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.267000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { perfmon } for pid=3989 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.267000 audit[3989]: AVC avc: denied { confidentiality } for pid=3989 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:12:47.267000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fffa14c09f0 a2=94 a3=88 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.267000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.268000 audit: BPF prog-id=188 op=LOAD Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4017 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333316334306337343831346239656265653535616438316466326336 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=c items=0 ppid=4017 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333316334306337343831346239656265653535616438316466326336 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit: BPF prog-id=189 op=LOAD Jul 14 23:12:47.269000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002a63d0 items=0 ppid=4017 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333316334306337343831346239656265653535616438316466326336 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit: BPF prog-id=190 op=LOAD Jul 14 23:12:47.269000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0002a6418 items=0 ppid=4017 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333316334306337343831346239656265653535616438316466326336 Jul 14 23:12:47.269000 audit: BPF prog-id=190 op=UNLOAD Jul 14 23:12:47.269000 audit: BPF prog-id=189 op=UNLOAD Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { perfmon } for pid=4026 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit[4026]: AVC avc: denied { bpf } for pid=4026 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.269000 audit: BPF prog-id=191 op=LOAD Jul 14 23:12:47.269000 audit[4026]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002a6828 items=0 ppid=4017 pid=4026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.269000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6333316334306337343831346239656265653535616438316466326336 Jul 14 23:12:47.270000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.270000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa14c2420 a2=10 a3=f8f00800 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.270000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.270000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.270000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa14c22c0 a2=10 a3=3 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.270000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.270000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.270000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa14c2260 a2=10 a3=3 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.270000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.270000 audit[3989]: AVC avc: denied { bpf } for pid=3989 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.270000 audit[3989]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fffa14c2260 a2=10 a3=7 items=0 ppid=3389 pid=3989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.270000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:12:47.274202 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:47.275646 env[1250]: time="2025-07-14T23:12:47.275615956Z" level=info msg="StartContainer for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\"" Jul 14 23:12:47.277000 audit: BPF prog-id=182 op=UNLOAD Jul 14 23:12:47.277000 audit[4046]: SYSCALL arch=c000003e syscall=46 success=yes exit=32 a0=3 a1=7ffde6682940 a2=0 a3=0 items=0 ppid=3389 pid=4046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.277000 audit: PROCTITLE proctitle=6970006C696E6B0064656C0063616C69636F5F746D705F41 Jul 14 23:12:47.301744 systemd[1]: Started cri-containerd-5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569.scope. Jul 14 23:12:47.344670 env[1250]: time="2025-07-14T23:12:47.344646591Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-7976686687-sr9b9,Uid:681c3e5d-7e9c-4690-8f31-b8e3038ba3d7,Namespace:calico-system,Attempt:0,} returns sandbox id \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\"" Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.352000 audit: BPF prog-id=192 op=LOAD Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3935 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561373364316562323437613630396138653461623639613262346365 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3935 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561373364316562323437613630396138653461623639613262346365 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.354000 audit: BPF prog-id=193 op=LOAD Jul 14 23:12:47.354000 audit[4055]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00026dee0 items=0 ppid=3935 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.354000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561373364316562323437613630396138653461623639613262346365 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit: BPF prog-id=194 op=LOAD Jul 14 23:12:47.355000 audit[4055]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00026df28 items=0 ppid=3935 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561373364316562323437613630396138653461623639613262346365 Jul 14 23:12:47.355000 audit: BPF prog-id=194 op=UNLOAD Jul 14 23:12:47.355000 audit: BPF prog-id=193 op=UNLOAD Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { perfmon } for pid=4055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit[4055]: AVC avc: denied { bpf } for pid=4055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:47.355000 audit: BPF prog-id=195 op=LOAD Jul 14 23:12:47.355000 audit[4055]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003ba338 items=0 ppid=3935 pid=4055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3561373364316562323437613630396138653461623639613262346365 Jul 14 23:12:47.377593 env[1250]: time="2025-07-14T23:12:47.377526694Z" level=info msg="StartContainer for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" returns successfully" Jul 14 23:12:47.435000 audit[4110]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=4110 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.435000 audit[4110]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7fff0c75a9a0 a2=0 a3=7fff0c75a98c items=0 ppid=3389 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.435000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.442000 audit[4109]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=4109 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.442000 audit[4109]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffe930ba530 a2=0 a3=7ffe930ba51c items=0 ppid=3389 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.442000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.460000 audit[4113]: NETFILTER_CFG table=nat:103 family=2 entries=15 op=nft_register_chain pid=4113 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.460000 audit[4113]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fffa8fc21e0 a2=0 a3=7fffa8fc21cc items=0 ppid=3389 pid=4113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.460000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.463000 audit[4114]: NETFILTER_CFG table=filter:104 family=2 entries=214 op=nft_register_chain pid=4114 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.463000 audit[4114]: SYSCALL arch=c000003e syscall=46 success=yes exit=124724 a0=3 a1=7ffc5a435390 a2=0 a3=7ffc5a43537c items=0 ppid=3389 pid=4114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.463000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.516000 audit[4130]: NETFILTER_CFG table=filter:105 family=2 entries=109 op=nft_register_chain pid=4130 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:47.516000 audit[4130]: SYSCALL arch=c000003e syscall=46 success=yes exit=60124 a0=3 a1=7ffddd296c70 a2=0 a3=7ffddd296c5c items=0 ppid=3389 pid=4130 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:47.516000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:47.598571 systemd-networkd[1061]: cali8784943ba53: Gained IPv6LL Jul 14 23:12:47.736000 audit[4067]: AVC avc: denied { getattr } for pid=4067 comm="coredns" path="cgroup:[4026533094]" dev="nsfs" ino=4026533094 scontext=system_u:system_r:svirt_lxc_net_t:s0:c344,c926 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 23:12:47.736000 audit[4067]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a828 a2=c0004d6b98 a3=0 items=0 ppid=3935 pid=4067 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c344,c926 key=(null) Jul 14 23:12:47.736000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 23:12:47.790553 systemd-networkd[1061]: cali205612dceb4: Gained IPv6LL Jul 14 23:12:47.925064 kubelet[2104]: I0714 23:12:47.923266 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1da8b3e4-5379-453c-91ee-94146b265671" path="/var/lib/kubelet/pods/1da8b3e4-5379-453c-91ee-94146b265671/volumes" Jul 14 23:12:48.111260 systemd-networkd[1061]: caliefe5b2c4116: Gained IPv6LL Jul 14 23:12:48.302644 systemd-networkd[1061]: cali8888556bd85: Gained IPv6LL Jul 14 23:12:48.366531 systemd-networkd[1061]: cali2061ca1db2b: Gained IPv6LL Jul 14 23:12:48.494556 systemd-networkd[1061]: calibd3146c7eae: Gained IPv6LL Jul 14 23:12:48.622591 systemd-networkd[1061]: vxlan.calico: Gained IPv6LL Jul 14 23:12:50.245577 env[1250]: time="2025-07-14T23:12:50.245429698Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.385561 env[1250]: time="2025-07-14T23:12:50.385522602Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.396956 env[1250]: time="2025-07-14T23:12:50.396531987Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.406401 env[1250]: time="2025-07-14T23:12:50.406252147Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.406581 env[1250]: time="2025-07-14T23:12:50.406563848Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 23:12:50.604442 env[1250]: time="2025-07-14T23:12:50.604362162Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 14 23:12:50.622385 env[1250]: time="2025-07-14T23:12:50.622359018Z" level=info msg="CreateContainer within sandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 23:12:50.651454 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2164905012.mount: Deactivated successfully. Jul 14 23:12:50.657168 env[1250]: time="2025-07-14T23:12:50.657132993Z" level=info msg="CreateContainer within sandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\"" Jul 14 23:12:50.659344 env[1250]: time="2025-07-14T23:12:50.659313748Z" level=info msg="StartContainer for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\"" Jul 14 23:12:50.682306 systemd[1]: Started cri-containerd-b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8.scope. Jul 14 23:12:50.720081 kernel: kauditd_printk_skb: 1011 callbacks suppressed Jul 14 23:12:50.720235 kernel: audit: type=1400 audit(1752534770.716:1286): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.734633 kernel: audit: type=1400 audit(1752534770.716:1287): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.734684 kernel: audit: type=1400 audit(1752534770.716:1288): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.734701 kernel: audit: type=1400 audit(1752534770.716:1289): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.734717 kernel: audit: type=1400 audit(1752534770.716:1290): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.734732 kernel: audit: type=1400 audit(1752534770.716:1291): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.741017 kernel: audit: type=1400 audit(1752534770.716:1292): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.741059 kernel: audit: type=1400 audit(1752534770.716:1293): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.741173 kubelet[2104]: I0714 23:12:50.695909 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-qt22r" podStartSLOduration=47.666118147 podStartE2EDuration="47.666118147s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:50.61972897 +0000 UTC m=+52.834252082" watchObservedRunningTime="2025-07-14 23:12:50.666118147 +0000 UTC m=+52.880641264" Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.746459 kernel: audit: type=1400 audit(1752534770.716:1294): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.746526 kernel: audit: type=1400 audit(1752534770.716:1295): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.716000 audit: BPF prog-id=196 op=LOAD Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3344 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234373865326532363032623237313730393236396239643065626465 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3344 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234373865326532363032623237313730393236396239643065626465 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit: BPF prog-id=197 op=LOAD Jul 14 23:12:50.722000 audit[4145]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002e6020 items=0 ppid=3344 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234373865326532363032623237313730393236396239643065626465 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit: BPF prog-id=198 op=LOAD Jul 14 23:12:50.722000 audit[4145]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002e6068 items=0 ppid=3344 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234373865326532363032623237313730393236396239643065626465 Jul 14 23:12:50.722000 audit: BPF prog-id=198 op=UNLOAD Jul 14 23:12:50.722000 audit: BPF prog-id=197 op=UNLOAD Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { perfmon } for pid=4145 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit[4145]: AVC avc: denied { bpf } for pid=4145 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:50.722000 audit: BPF prog-id=199 op=LOAD Jul 14 23:12:50.722000 audit[4145]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002e6478 items=0 ppid=3344 pid=4145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.722000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6234373865326532363032623237313730393236396239643065626465 Jul 14 23:12:50.760454 env[1250]: time="2025-07-14T23:12:50.760412001Z" level=info msg="StartContainer for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" returns successfully" Jul 14 23:12:50.964000 audit[4179]: NETFILTER_CFG table=filter:106 family=2 entries=20 op=nft_register_rule pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:50.964000 audit[4179]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd448d4180 a2=0 a3=7ffd448d416c items=0 ppid=2207 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.964000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:50.969000 audit[4179]: NETFILTER_CFG table=nat:107 family=2 entries=14 op=nft_register_rule pid=4179 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:50.969000 audit[4179]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffd448d4180 a2=0 a3=0 items=0 ppid=2207 pid=4179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:50.969000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:50.983202 env[1250]: time="2025-07-14T23:12:50.983166917Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.984807 env[1250]: time="2025-07-14T23:12:50.984791698Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.986293 env[1250]: time="2025-07-14T23:12:50.986269462Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.986942 env[1250]: time="2025-07-14T23:12:50.986923570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:50.987297 env[1250]: time="2025-07-14T23:12:50.987281572Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 14 23:12:50.988293 env[1250]: time="2025-07-14T23:12:50.988262038Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 14 23:12:50.989440 env[1250]: time="2025-07-14T23:12:50.989409044Z" level=info msg="CreateContainer within sandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 14 23:12:51.005390 env[1250]: time="2025-07-14T23:12:51.005359493Z" level=info msg="CreateContainer within sandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\"" Jul 14 23:12:51.005925 env[1250]: time="2025-07-14T23:12:51.005911478Z" level=info msg="StartContainer for \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\"" Jul 14 23:12:51.016920 systemd[1]: Started cri-containerd-6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d.scope. Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.030000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.031000 audit: BPF prog-id=200 op=LOAD Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3719 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663935633736303036653639643333626362633532333230333662 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3719 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663935633736303036653639643333626362633532333230333662 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit: BPF prog-id=201 op=LOAD Jul 14 23:12:51.033000 audit[4187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002c5df0 items=0 ppid=3719 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663935633736303036653639643333626362633532333230333662 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit: BPF prog-id=202 op=LOAD Jul 14 23:12:51.033000 audit[4187]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002c5e38 items=0 ppid=3719 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663935633736303036653639643333626362633532333230333662 Jul 14 23:12:51.033000 audit: BPF prog-id=202 op=UNLOAD Jul 14 23:12:51.033000 audit: BPF prog-id=201 op=UNLOAD Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { perfmon } for pid=4187 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit[4187]: AVC avc: denied { bpf } for pid=4187 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:51.033000 audit: BPF prog-id=203 op=LOAD Jul 14 23:12:51.033000 audit[4187]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a2248 items=0 ppid=3719 pid=4187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.033000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661663935633736303036653639643333626362633532333230333662 Jul 14 23:12:51.071732 env[1250]: time="2025-07-14T23:12:51.071703893Z" level=info msg="StartContainer for \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\" returns successfully" Jul 14 23:12:51.622320 kubelet[2104]: I0714 23:12:51.622279 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-866fb9ff9d-zmphk" podStartSLOduration=34.526068293 podStartE2EDuration="39.622263489s" podCreationTimestamp="2025-07-14 23:12:12 +0000 UTC" firstStartedPulling="2025-07-14 23:12:45.478672553 +0000 UTC m=+47.693195652" lastFinishedPulling="2025-07-14 23:12:50.574867745 +0000 UTC m=+52.789390848" observedRunningTime="2025-07-14 23:12:51.620636547 +0000 UTC m=+53.835159659" watchObservedRunningTime="2025-07-14 23:12:51.622263489 +0000 UTC m=+53.836786596" Jul 14 23:12:51.648321 systemd[1]: run-containerd-runc-k8s.io-b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8-runc.nn2USi.mount: Deactivated successfully. Jul 14 23:12:51.653000 audit[4220]: NETFILTER_CFG table=filter:108 family=2 entries=20 op=nft_register_rule pid=4220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.653000 audit[4220]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffff80de8d0 a2=0 a3=7ffff80de8bc items=0 ppid=2207 pid=4220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.653000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.657000 audit[4220]: NETFILTER_CFG table=nat:109 family=2 entries=14 op=nft_register_rule pid=4220 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.657000 audit[4220]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffff80de8d0 a2=0 a3=0 items=0 ppid=2207 pid=4220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.657000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.795000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:12:51.795000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000ba1d00 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:12:51.795000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:12:51.832795 kubelet[2104]: I0714 23:12:51.832764 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-866fb9ff9d-grs5p" podStartSLOduration=35.594209737 podStartE2EDuration="39.832750015s" podCreationTimestamp="2025-07-14 23:12:12 +0000 UTC" firstStartedPulling="2025-07-14 23:12:46.749317469 +0000 UTC m=+48.963840570" lastFinishedPulling="2025-07-14 23:12:50.987857745 +0000 UTC m=+53.202380848" observedRunningTime="2025-07-14 23:12:51.633819388 +0000 UTC m=+53.848342490" watchObservedRunningTime="2025-07-14 23:12:51.832750015 +0000 UTC m=+54.047273121" Jul 14 23:12:51.846000 audit[4222]: NETFILTER_CFG table=filter:110 family=2 entries=16 op=nft_register_rule pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.846000 audit[4222]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc19fff340 a2=0 a3=7ffc19fff32c items=0 ppid=2207 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.846000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:51.852000 audit[4222]: NETFILTER_CFG table=nat:111 family=2 entries=42 op=nft_register_chain pid=4222 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:51.852000 audit[4222]: SYSCALL arch=c000003e syscall=46 success=yes exit=17772 a0=3 a1=7ffc19fff340 a2=0 a3=7ffc19fff32c items=0 ppid=2207 pid=4222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:51.852000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:52.236000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:12:52.236000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000b20920 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:12:52.236000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:12:52.610265 kubelet[2104]: I0714 23:12:52.610092 2104 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:12:54.166000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.166000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.166000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0015bc3c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:54.166000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:54.166000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00204d0e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:54.166000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:54.713853 env[1250]: time="2025-07-14T23:12:54.713815405Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:54.735882 env[1250]: time="2025-07-14T23:12:54.735851437Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:54.742826 env[1250]: time="2025-07-14T23:12:54.742796088Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:54.746187 env[1250]: time="2025-07-14T23:12:54.743626180Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:54.746187 env[1250]: time="2025-07-14T23:12:54.744393370Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 14 23:12:54.901000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.901000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0132f7120 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:12:54.901000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:54.901000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.901000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c007ae8c60 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:12:54.901000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:54.907000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.907000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c007828840 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:12:54.907000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:54.911948 env[1250]: time="2025-07-14T23:12:54.902090992Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 14 23:12:54.912000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.912000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0078288d0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:12:54.912000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:54.938000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.938000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=72 a1=c0132f72a0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:12:54.938000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:54.938000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:54.938000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c007ae8d80 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:12:54.938000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:12:54.999007 env[1250]: time="2025-07-14T23:12:54.998235397Z" level=info msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" Jul 14 23:12:55.240132 env[1250]: time="2025-07-14T23:12:55.240099235Z" level=info msg="CreateContainer within sandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 14 23:12:55.271903 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4197247520.mount: Deactivated successfully. Jul 14 23:12:55.421205 env[1250]: time="2025-07-14T23:12:55.421179710Z" level=info msg="CreateContainer within sandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\"" Jul 14 23:12:55.425296 env[1250]: time="2025-07-14T23:12:55.425278826Z" level=info msg="StartContainer for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\"" Jul 14 23:12:55.461274 systemd[1]: Started cri-containerd-4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768.scope. Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit: BPF prog-id=204 op=LOAD Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3759 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463363763323165636232393338316330666463333236383061333936 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3759 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463363763323165636232393338316330666463333236383061333936 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.476000 audit: BPF prog-id=205 op=LOAD Jul 14 23:12:55.476000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00031f950 items=0 ppid=3759 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463363763323165636232393338316330666463333236383061333936 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit: BPF prog-id=206 op=LOAD Jul 14 23:12:55.477000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00031f998 items=0 ppid=3759 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463363763323165636232393338316330666463333236383061333936 Jul 14 23:12:55.477000 audit: BPF prog-id=206 op=UNLOAD Jul 14 23:12:55.477000 audit: BPF prog-id=205 op=UNLOAD Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { perfmon } for pid=4254 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit[4254]: AVC avc: denied { bpf } for pid=4254 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:55.477000 audit: BPF prog-id=207 op=LOAD Jul 14 23:12:55.477000 audit[4254]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00031fda8 items=0 ppid=3759 pid=4254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:55.477000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3463363763323165636232393338316330666463333236383061333936 Jul 14 23:12:55.520255 env[1250]: time="2025-07-14T23:12:55.520226306Z" level=info msg="StartContainer for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" returns successfully" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:55.625 [INFO][4242] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:55.628 [INFO][4242] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" iface="eth0" netns="/var/run/netns/cni-87861437-bdee-8687-e710-1f7c6d0459cb" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:55.630 [INFO][4242] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" iface="eth0" netns="/var/run/netns/cni-87861437-bdee-8687-e710-1f7c6d0459cb" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:55.631 [INFO][4242] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" iface="eth0" netns="/var/run/netns/cni-87861437-bdee-8687-e710-1f7c6d0459cb" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:55.631 [INFO][4242] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:55.631 [INFO][4242] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.120 [INFO][4292] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.125 [INFO][4292] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.126 [INFO][4292] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.147 [WARNING][4292] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.147 [INFO][4292] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.148 [INFO][4292] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:56.155065 env[1250]: 2025-07-14 23:12:56.152 [INFO][4242] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:12:56.162248 env[1250]: time="2025-07-14T23:12:56.158487746Z" level=info msg="TearDown network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" successfully" Jul 14 23:12:56.162248 env[1250]: time="2025-07-14T23:12:56.158510218Z" level=info msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" returns successfully" Jul 14 23:12:56.162248 env[1250]: time="2025-07-14T23:12:56.161196561Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vjmsz,Uid:65aa8c25-c100-4c4d-b765-2e9deaf1c86c,Namespace:kube-system,Attempt:1,}" Jul 14 23:12:56.157300 systemd[1]: run-netns-cni\x2d87861437\x2dbdee\x2d8687\x2de710\x2d1f7c6d0459cb.mount: Deactivated successfully. Jul 14 23:12:56.430202 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 14 23:12:56.478820 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali206934f96fa: link becomes ready Jul 14 23:12:56.442829 systemd-networkd[1061]: cali206934f96fa: Link UP Jul 14 23:12:56.442935 systemd-networkd[1061]: cali206934f96fa: Gained carrier Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.251 [INFO][4320] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0 coredns-7c65d6cfc9- kube-system 65aa8c25-c100-4c4d-b765-2e9deaf1c86c 1004 0 2025-07-14 23:12:03 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-vjmsz eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali206934f96fa [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.251 [INFO][4320] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.294 [INFO][4334] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.294 [INFO][4334] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ad4a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-vjmsz", "timestamp":"2025-07-14 23:12:56.293999795 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.294 [INFO][4334] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.294 [INFO][4334] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.294 [INFO][4334] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.325 [INFO][4334] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.388 [INFO][4334] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.394 [INFO][4334] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.395 [INFO][4334] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.396 [INFO][4334] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.396 [INFO][4334] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.397 [INFO][4334] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4 Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.400 [INFO][4334] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.406 [INFO][4334] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.406 [INFO][4334] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" host="localhost" Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.406 [INFO][4334] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:12:56.502754 env[1250]: 2025-07-14 23:12:56.406 [INFO][4334] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.517604 env[1250]: 2025-07-14 23:12:56.408 [INFO][4320] cni-plugin/k8s.go 418: Populated endpoint ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"65aa8c25-c100-4c4d-b765-2e9deaf1c86c", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-vjmsz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali206934f96fa", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:56.517604 env[1250]: 2025-07-14 23:12:56.408 [INFO][4320] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.517604 env[1250]: 2025-07-14 23:12:56.408 [INFO][4320] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali206934f96fa ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.517604 env[1250]: 2025-07-14 23:12:56.432 [INFO][4320] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.517604 env[1250]: 2025-07-14 23:12:56.432 [INFO][4320] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"65aa8c25-c100-4c4d-b765-2e9deaf1c86c", ResourceVersion:"1004", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4", Pod:"coredns-7c65d6cfc9-vjmsz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali206934f96fa", MAC:"42:3e:2c:77:fd:41", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:12:56.517604 env[1250]: 2025-07-14 23:12:56.481 [INFO][4320] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Namespace="kube-system" Pod="coredns-7c65d6cfc9-vjmsz" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:12:56.541279 kubelet[2104]: I0714 23:12:56.514784 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-ff54b7cbb-m45xx" podStartSLOduration=33.515345472999996 podStartE2EDuration="41.493465618s" podCreationTimestamp="2025-07-14 23:12:15 +0000 UTC" firstStartedPulling="2025-07-14 23:12:46.787918756 +0000 UTC m=+49.002441859" lastFinishedPulling="2025-07-14 23:12:54.766038901 +0000 UTC m=+56.980562004" observedRunningTime="2025-07-14 23:12:56.140715262 +0000 UTC m=+58.355238372" watchObservedRunningTime="2025-07-14 23:12:56.493465618 +0000 UTC m=+58.707988728" Jul 14 23:12:56.573180 env[1250]: time="2025-07-14T23:12:56.566552148Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 14 23:12:56.573180 env[1250]: time="2025-07-14T23:12:56.566584939Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 14 23:12:56.573180 env[1250]: time="2025-07-14T23:12:56.566592392Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 14 23:12:56.573180 env[1250]: time="2025-07-14T23:12:56.566717521Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4 pid=4356 runtime=io.containerd.runc.v2 Jul 14 23:12:56.623748 systemd[1]: Started cri-containerd-50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4.scope. Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.669865 kernel: kauditd_printk_skb: 209 callbacks suppressed Jul 14 23:12:56.672127 kernel: audit: type=1400 audit(1752534776.636:1356): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.673371 kernel: audit: type=1400 audit(1752534776.636:1357): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.675806 kernel: audit: type=1400 audit(1752534776.636:1358): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.675834 kernel: audit: type=1400 audit(1752534776.636:1359): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.675853 kernel: audit: type=1400 audit(1752534776.636:1360): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.675871 kernel: audit: type=1400 audit(1752534776.636:1361): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.675890 kernel: audit: type=1400 audit(1752534776.636:1362): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.679308 kernel: audit: type=1400 audit(1752534776.636:1363): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.679333 kernel: audit: type=1400 audit(1752534776.636:1364): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.679350 kernel: audit: type=1400 audit(1752534776.636:1365): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.636000 audit: BPF prog-id=208 op=LOAD Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4356 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530646339396638356436333435343238386131303535373034333764 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4356 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530646339396638356436333435343238386131303535373034333764 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit: BPF prog-id=209 op=LOAD Jul 14 23:12:56.645000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003bc030 items=0 ppid=4356 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530646339396638356436333435343238386131303535373034333764 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit: BPF prog-id=210 op=LOAD Jul 14 23:12:56.645000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003bc078 items=0 ppid=4356 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530646339396638356436333435343238386131303535373034333764 Jul 14 23:12:56.645000 audit: BPF prog-id=210 op=UNLOAD Jul 14 23:12:56.645000 audit: BPF prog-id=209 op=UNLOAD Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { perfmon } for pid=4366 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit[4366]: AVC avc: denied { bpf } for pid=4366 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:56.645000 audit: BPF prog-id=211 op=LOAD Jul 14 23:12:56.645000 audit[4366]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003bc488 items=0 ppid=4356 pid=4366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:56.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530646339396638356436333435343238386131303535373034333764 Jul 14 23:12:56.649433 systemd-resolved[1203]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 14 23:12:56.733212 env[1250]: time="2025-07-14T23:12:56.723090698Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-vjmsz,Uid:65aa8c25-c100-4c4d-b765-2e9deaf1c86c,Namespace:kube-system,Attempt:1,} returns sandbox id \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\"" Jul 14 23:12:56.741459 env[1250]: time="2025-07-14T23:12:56.741321423Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:56.747988 env[1250]: time="2025-07-14T23:12:56.747967870Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:56.749839 env[1250]: time="2025-07-14T23:12:56.749812366Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:56.753386 env[1250]: time="2025-07-14T23:12:56.753358344Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:12:56.753760 env[1250]: time="2025-07-14T23:12:56.753739654Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 14 23:12:56.946861 env[1250]: time="2025-07-14T23:12:56.946820776Z" level=info msg="CreateContainer within sandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 14 23:12:56.993301 env[1250]: time="2025-07-14T23:12:56.992896512Z" level=info msg="CreateContainer within sandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\"" Jul 14 23:12:57.003605 env[1250]: time="2025-07-14T23:12:57.003515866Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 14 23:12:57.017998 env[1250]: time="2025-07-14T23:12:57.016777192Z" level=info msg="StartContainer for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\"" Jul 14 23:12:57.017998 env[1250]: time="2025-07-14T23:12:57.017562693Z" level=info msg="CreateContainer within sandbox \"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 14 23:12:57.045525 env[1250]: time="2025-07-14T23:12:57.039099882Z" level=info msg="CreateContainer within sandbox \"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"35dbd555ae3bc1870354f77fff40e89ac087f65ad35fb5373a40034eb41edaab\"" Jul 14 23:12:57.047037 env[1250]: time="2025-07-14T23:12:57.047012359Z" level=info msg="StartContainer for \"35dbd555ae3bc1870354f77fff40e89ac087f65ad35fb5373a40034eb41edaab\"" Jul 14 23:12:57.061432 systemd[1]: Started cri-containerd-e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964.scope. Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.077000 audit: BPF prog-id=212 op=LOAD Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4356 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343437383965316463393633343436653936623137613734376634 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4356 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343437383965316463393633343436653936623137613734376634 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit: BPF prog-id=213 op=LOAD Jul 14 23:12:57.078000 audit[4410]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000322040 items=0 ppid=4356 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343437383965316463393633343436653936623137613734376634 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit: BPF prog-id=214 op=LOAD Jul 14 23:12:57.078000 audit[4410]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000322088 items=0 ppid=4356 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343437383965316463393633343436653936623137613734376634 Jul 14 23:12:57.078000 audit: BPF prog-id=214 op=UNLOAD Jul 14 23:12:57.078000 audit: BPF prog-id=213 op=UNLOAD Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { perfmon } for pid=4410 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit[4410]: AVC avc: denied { bpf } for pid=4410 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.078000 audit: BPF prog-id=215 op=LOAD Jul 14 23:12:57.078000 audit[4410]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000322498 items=0 ppid=4356 pid=4410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.078000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538343437383965316463393633343436653936623137613734376634 Jul 14 23:12:57.086583 systemd[1]: Started cri-containerd-35dbd555ae3bc1870354f77fff40e89ac087f65ad35fb5373a40034eb41edaab.scope. Jul 14 23:12:57.110695 env[1250]: time="2025-07-14T23:12:57.110663615Z" level=info msg="StartContainer for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" returns successfully" Jul 14 23:12:57.111000 audit[4456]: NETFILTER_CFG table=filter:112 family=2 entries=36 op=nft_register_chain pid=4456 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:12:57.111000 audit[4456]: SYSCALL arch=c000003e syscall=46 success=yes exit=19176 a0=3 a1=7ffdb63562a0 a2=0 a3=7ffdb635628c items=0 ppid=3389 pid=4456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.111000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f0ff8a4c1c8 items=0 ppid=3811 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335646264353535616533626331383730333534663737666666343065 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.116000 audit: BPF prog-id=216 op=LOAD Jul 14 23:12:57.116000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003de2c8 items=0 ppid=3811 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.116000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335646264353535616533626331383730333534663737666666343065 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit: BPF prog-id=217 op=LOAD Jul 14 23:12:57.117000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003de318 items=0 ppid=3811 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335646264353535616533626331383730333534663737666666343065 Jul 14 23:12:57.117000 audit: BPF prog-id=217 op=UNLOAD Jul 14 23:12:57.117000 audit: BPF prog-id=216 op=UNLOAD Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { perfmon } for pid=4440 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit[4440]: AVC avc: denied { bpf } for pid=4440 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:12:57.117000 audit: BPF prog-id=218 op=LOAD Jul 14 23:12:57.117000 audit[4440]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003de3a8 items=0 ppid=3811 pid=4440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:57.117000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335646264353535616533626331383730333534663737666666343065 Jul 14 23:12:57.148469 env[1250]: time="2025-07-14T23:12:57.148434743Z" level=info msg="StartContainer for \"35dbd555ae3bc1870354f77fff40e89ac087f65ad35fb5373a40034eb41edaab\" returns successfully" Jul 14 23:12:57.442000 audit[4432]: AVC avc: denied { getattr } for pid=4432 comm="coredns" path="cgroup:[4026533112]" dev="nsfs" ino=4026533112 scontext=system_u:system_r:svirt_lxc_net_t:s0:c242,c634 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 14 23:12:57.442000 audit[4432]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa08 a2=c000126ed8 a3=0 items=0 ppid=4356 pid=4432 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c242,c634 key=(null) Jul 14 23:12:57.442000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 14 23:12:57.547000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:57.547000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:57.547000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002380fe0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:57.547000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:57.547000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:57.547000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002381000 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:57.547000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:57.547000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00204da40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:57.547000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:57.569000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:12:57.569000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00204dae0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:12:57.569000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:12:58.029870 env[1250]: time="2025-07-14T23:12:58.028137650Z" level=info msg="StopPodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\"" Jul 14 23:12:58.142035 kubelet[2104]: I0714 23:12:58.138328 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-vjmsz" podStartSLOduration=55.128409832 podStartE2EDuration="55.128409832s" podCreationTimestamp="2025-07-14 23:12:03 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-14 23:12:58.115254771 +0000 UTC m=+60.329777877" watchObservedRunningTime="2025-07-14 23:12:58.128409832 +0000 UTC m=+60.342932936" Jul 14 23:12:58.158688 systemd-networkd[1061]: cali206934f96fa: Gained IPv6LL Jul 14 23:12:58.307000 audit[4503]: NETFILTER_CFG table=filter:113 family=2 entries=12 op=nft_register_rule pid=4503 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:58.307000 audit[4503]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffc2e61630 a2=0 a3=7fffc2e6161c items=0 ppid=2207 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:58.307000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:58.342000 audit[4503]: NETFILTER_CFG table=nat:114 family=2 entries=58 op=nft_register_chain pid=4503 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:58.342000 audit[4503]: SYSCALL arch=c000003e syscall=46 success=yes exit=20628 a0=3 a1=7fffc2e61630 a2=0 a3=7fffc2e6161c items=0 ppid=2207 pid=4503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:58.342000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:58.393000 audit[4507]: NETFILTER_CFG table=filter:115 family=2 entries=12 op=nft_register_rule pid=4507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:58.393000 audit[4507]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffdf1d70c0 a2=0 a3=7fffdf1d70ac items=0 ppid=2207 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:58.393000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:12:58.398000 audit[4507]: NETFILTER_CFG table=nat:116 family=2 entries=22 op=nft_register_rule pid=4507 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:12:58.398000 audit[4507]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7fffdf1d70c0 a2=0 a3=7fffdf1d70ac items=0 ppid=2207 pid=4507 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:12:58.398000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:00.550170 systemd[1]: run-containerd-runc-k8s.io-4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768-runc.otRcc9.mount: Deactivated successfully. Jul 14 23:13:01.516664 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1668745004.mount: Deactivated successfully. Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:12:58.439 [WARNING][4498] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--k88bl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"77278217-2907-4c17-b495-1275ac4f971e", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58", Pod:"csi-node-driver-k88bl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali205612dceb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:12:58.444 [INFO][4498] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:12:58.444 [INFO][4498] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" iface="eth0" netns="" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:12:58.444 [INFO][4498] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:12:58.444 [INFO][4498] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.216 [INFO][4510] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.267 [INFO][4510] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.272 [INFO][4510] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.644 [WARNING][4510] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.645 [INFO][4510] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.646 [INFO][4510] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:01.803626 env[1250]: 2025-07-14 23:13:01.759 [INFO][4498] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:01.803626 env[1250]: time="2025-07-14T23:13:01.803548445Z" level=info msg="TearDown network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" successfully" Jul 14 23:13:01.803626 env[1250]: time="2025-07-14T23:13:01.803570860Z" level=info msg="StopPodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" returns successfully" Jul 14 23:13:02.698917 kubelet[2104]: E0714 23:13:02.698867 2104 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.911s" Jul 14 23:13:02.764550 env[1250]: time="2025-07-14T23:13:02.764453747Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:02.773057 env[1250]: time="2025-07-14T23:13:02.772884564Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:02.774633 env[1250]: time="2025-07-14T23:13:02.774605814Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:02.776973 env[1250]: time="2025-07-14T23:13:02.776734610Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:02.777288 env[1250]: time="2025-07-14T23:13:02.777271879Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 14 23:13:03.350624 env[1250]: time="2025-07-14T23:13:03.350594441Z" level=info msg="RemovePodSandbox for \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\"" Jul 14 23:13:03.350922 env[1250]: time="2025-07-14T23:13:03.350622897Z" level=info msg="Forcibly stopping sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\"" Jul 14 23:13:03.755282 env[1250]: time="2025-07-14T23:13:03.755211666Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 14 23:13:04.069082 env[1250]: time="2025-07-14T23:13:04.069051333Z" level=info msg="CreateContainer within sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 14 23:13:04.136711 env[1250]: time="2025-07-14T23:13:04.136674553Z" level=info msg="CreateContainer within sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\"" Jul 14 23:13:04.139695 env[1250]: time="2025-07-14T23:13:04.138842899Z" level=info msg="StartContainer for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\"" Jul 14 23:13:04.292002 systemd[1]: run-containerd-runc-k8s.io-712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3-runc.pHnmrj.mount: Deactivated successfully. Jul 14 23:13:04.521923 systemd[1]: Started cri-containerd-712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3.scope. Jul 14 23:13:04.548245 kernel: kauditd_printk_skb: 177 callbacks suppressed Jul 14 23:13:04.574911 kernel: audit: type=1400 audit(1752534784.544:1408): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.590752 kernel: audit: type=1400 audit(1752534784.544:1409): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.590808 kernel: audit: type=1400 audit(1752534784.544:1410): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.590829 kernel: audit: type=1400 audit(1752534784.544:1411): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.594127 kernel: audit: type=1400 audit(1752534784.544:1412): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.598220 kernel: audit: type=1400 audit(1752534784.544:1413): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.598252 kernel: audit: type=1400 audit(1752534784.544:1414): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.598272 kernel: audit: type=1400 audit(1752534784.544:1415): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.601974 kernel: audit: type=1400 audit(1752534784.544:1416): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.602011 kernel: audit: type=1400 audit(1752534784.547:1417): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.544000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.547000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.547000 audit: BPF prog-id=219 op=LOAD Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3881 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:04.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326639333338366362333836623566626238306534316230623263 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3881 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:04.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326639333338366362333836623566626238306534316230623263 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.548000 audit: BPF prog-id=220 op=LOAD Jul 14 23:13:04.548000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000219b60 items=0 ppid=3881 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:04.548000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326639333338366362333836623566626238306534316230623263 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit: BPF prog-id=221 op=LOAD Jul 14 23:13:04.550000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000219ba8 items=0 ppid=3881 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:04.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326639333338366362333836623566626238306534316230623263 Jul 14 23:13:04.550000 audit: BPF prog-id=221 op=UNLOAD Jul 14 23:13:04.550000 audit: BPF prog-id=220 op=UNLOAD Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { perfmon } for pid=4583 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit[4583]: AVC avc: denied { bpf } for pid=4583 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:04.550000 audit: BPF prog-id=222 op=LOAD Jul 14 23:13:04.550000 audit[4583]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000219fb8 items=0 ppid=3881 pid=4583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:04.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3731326639333338366362333836623566626238306534316230623263 Jul 14 23:13:04.816118 env[1250]: time="2025-07-14T23:13:04.600070651Z" level=info msg="StartContainer for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" returns successfully" Jul 14 23:13:05.366986 kubelet[2104]: I0714 23:13:05.341083 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-mng8c" podStartSLOduration=34.335905053 podStartE2EDuration="51.095280956s" podCreationTimestamp="2025-07-14 23:12:14 +0000 UTC" firstStartedPulling="2025-07-14 23:12:46.913101199 +0000 UTC m=+49.127624309" lastFinishedPulling="2025-07-14 23:13:03.672477108 +0000 UTC m=+65.887000212" observedRunningTime="2025-07-14 23:13:04.965602629 +0000 UTC m=+67.180125742" watchObservedRunningTime="2025-07-14 23:13:05.095280956 +0000 UTC m=+67.309804067" Jul 14 23:13:06.384044 env[1250]: time="2025-07-14T23:13:06.384018908Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:06.538657 env[1250]: time="2025-07-14T23:13:06.538630461Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:06.808123 kubelet[2104]: I0714 23:13:06.796166 2104 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:13:06.853000 audit[4637]: NETFILTER_CFG table=filter:117 family=2 entries=12 op=nft_register_rule pid=4637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:13:06.853000 audit[4637]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffff0cb5510 a2=0 a3=7ffff0cb54fc items=0 ppid=2207 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:06.853000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:06.858000 audit[4637]: NETFILTER_CFG table=nat:118 family=2 entries=22 op=nft_register_rule pid=4637 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:13:06.858000 audit[4637]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffff0cb5510 a2=0 a3=7ffff0cb54fc items=0 ppid=2207 pid=4637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:06.858000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:13:08.258630 env[1250]: time="2025-07-14T23:13:08.258603639Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:08.265744 env[1250]: time="2025-07-14T23:13:08.264833612Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 14 23:13:08.265744 env[1250]: time="2025-07-14T23:13:08.265023873Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:05.895 [WARNING][4568] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--k88bl-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"77278217-2907-4c17-b495-1275ac4f971e", ResourceVersion:"938", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58", Pod:"csi-node-driver-k88bl", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali205612dceb4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:05.975 [INFO][4568] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:05.982 [INFO][4568] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" iface="eth0" netns="" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:06.003 [INFO][4568] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:06.003 [INFO][4568] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.705 [INFO][4636] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.736 [INFO][4636] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.740 [INFO][4636] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.928 [WARNING][4636] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.928 [INFO][4636] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" HandleID="k8s-pod-network.c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Workload="localhost-k8s-csi--node--driver--k88bl-eth0" Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.943 [INFO][4636] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:09.004255 env[1250]: 2025-07-14 23:13:08.972 [INFO][4568] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f" Jul 14 23:13:09.019760 env[1250]: time="2025-07-14T23:13:09.004285187Z" level=info msg="TearDown network for sandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" successfully" Jul 14 23:13:09.019760 env[1250]: time="2025-07-14T23:13:09.008687013Z" level=info msg="RemovePodSandbox \"c17f043f98537fe72a32ced8e236d4969295472beeaba481dc4c22501218ef2f\" returns successfully" Jul 14 23:13:09.134253 env[1250]: time="2025-07-14T23:13:09.134044914Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 14 23:13:09.472464 env[1250]: time="2025-07-14T23:13:09.472230514Z" level=info msg="StopPodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\"" Jul 14 23:13:10.448539 env[1250]: time="2025-07-14T23:13:10.448471632Z" level=info msg="CreateContainer within sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 14 23:13:10.510854 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3775954333.mount: Deactivated successfully. Jul 14 23:13:10.585584 env[1250]: time="2025-07-14T23:13:10.511269001Z" level=info msg="CreateContainer within sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\"" Jul 14 23:13:10.633695 env[1250]: time="2025-07-14T23:13:10.633645496Z" level=info msg="StartContainer for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\"" Jul 14 23:13:10.745449 systemd[1]: run-containerd-runc-k8s.io-35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5-runc.aArkGW.mount: Deactivated successfully. Jul 14 23:13:10.806689 systemd[1]: Started cri-containerd-35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5.scope. Jul 14 23:13:11.009546 kernel: kauditd_printk_skb: 53 callbacks suppressed Jul 14 23:13:11.064229 kernel: audit: type=1400 audit(1752534791.005:1428): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.092987 kernel: audit: type=1400 audit(1752534791.005:1429): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.093044 kernel: audit: type=1400 audit(1752534791.005:1430): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.093072 kernel: audit: type=1400 audit(1752534791.005:1431): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.093133 kernel: audit: type=1400 audit(1752534791.005:1432): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.100474 kernel: audit: type=1400 audit(1752534791.005:1433): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.114860 kernel: audit: type=1400 audit(1752534791.005:1434): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.114923 kernel: audit: type=1400 audit(1752534791.005:1435): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.121060 kernel: audit: type=1400 audit(1752534791.005:1436): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.127138 kernel: audit: type=1400 audit(1752534791.008:1437): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.005000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.008000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.008000 audit: BPF prog-id=223 op=LOAD Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4017 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:11.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663261653163306561613231633563663264376238303061343933 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4017 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:11.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663261653163306561613231633563663264376238303061343933 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.013000 audit: BPF prog-id=224 op=LOAD Jul 14 23:13:11.013000 audit[4692]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00028bd60 items=0 ppid=4017 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:11.013000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663261653163306561613231633563663264376238303061343933 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit: BPF prog-id=225 op=LOAD Jul 14 23:13:11.016000 audit[4692]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00028bda8 items=0 ppid=4017 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:11.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663261653163306561613231633563663264376238303061343933 Jul 14 23:13:11.016000 audit: BPF prog-id=225 op=UNLOAD Jul 14 23:13:11.016000 audit: BPF prog-id=224 op=UNLOAD Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { perfmon } for pid=4692 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit[4692]: AVC avc: denied { bpf } for pid=4692 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:11.016000 audit: BPF prog-id=226 op=LOAD Jul 14 23:13:11.016000 audit[4692]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0002fc1b8 items=0 ppid=4017 pid=4692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:11.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3335663261653163306561613231633563663264376238303061343933 Jul 14 23:13:11.773899 env[1250]: time="2025-07-14T23:13:11.088157891Z" level=info msg="StartContainer for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" returns successfully" Jul 14 23:13:12.427000 audit[4703]: AVC avc: denied { search } for pid=4703 comm="nginx" name="crypto" dev="proc" ino=44459 scontext=system_u:system_r:svirt_lxc_net_t:s0:c315,c737 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 14 23:13:12.427000 audit[4703]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f62a7ad9728 a2=0 a3=0 items=0 ppid=4017 pid=4703 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c315,c737 key=(null) Jul 14 23:13:12.427000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 14 23:13:13.337966 env[1250]: time="2025-07-14T23:13:13.337845165Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:13.515062 env[1250]: time="2025-07-14T23:13:13.515026332Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:16.373122 env[1250]: time="2025-07-14T23:13:16.373059452Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:16.492706 env[1250]: time="2025-07-14T23:13:16.444784108Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:16.492706 env[1250]: time="2025-07-14T23:13:16.444946254Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:16.908 [WARNING][4678] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0", Pod:"calico-apiserver-866fb9ff9d-grs5p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8784943ba53", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:17.058 [INFO][4678] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:17.061 [INFO][4678] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" iface="eth0" netns="" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:17.064 [INFO][4678] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:17.064 [INFO][4678] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.226 [INFO][4728] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.236 [INFO][4728] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.237 [INFO][4728] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.590 [WARNING][4728] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.590 [INFO][4728] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.591 [INFO][4728] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:18.650139 env[1250]: 2025-07-14 23:13:18.614 [INFO][4678] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:18.650139 env[1250]: time="2025-07-14T23:13:18.650163734Z" level=info msg="TearDown network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" successfully" Jul 14 23:13:18.650139 env[1250]: time="2025-07-14T23:13:18.650187443Z" level=info msg="StopPodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" returns successfully" Jul 14 23:13:21.455103 env[1250]: time="2025-07-14T23:13:21.454462703Z" level=info msg="RemovePodSandbox for \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\"" Jul 14 23:13:21.455103 env[1250]: time="2025-07-14T23:13:21.454490337Z" level=info msg="Forcibly stopping sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\"" Jul 14 23:13:21.573879 kubelet[2104]: E0714 23:13:21.571272 2104 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="11.34s" Jul 14 23:13:21.674819 env[1250]: time="2025-07-14T23:13:21.674731327Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 14 23:13:21.684575 env[1250]: time="2025-07-14T23:13:21.684467228Z" level=info msg="CreateContainer within sandbox \"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 14 23:13:21.938250 env[1250]: time="2025-07-14T23:13:21.938158380Z" level=info msg="CreateContainer within sandbox \"b276d67e0770876ba5a8977211ee2426bf7d82df5555e38c864abacccd98bc58\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"78b2575fca0eaa08932c672f0b404c239e1adf2c37b4a4e089577bb6d4735a77\"" Jul 14 23:13:21.939709 env[1250]: time="2025-07-14T23:13:21.938715969Z" level=info msg="StartContainer for \"78b2575fca0eaa08932c672f0b404c239e1adf2c37b4a4e089577bb6d4735a77\"" Jul 14 23:13:22.005164 systemd[1]: run-containerd-runc-k8s.io-78b2575fca0eaa08932c672f0b404c239e1adf2c37b4a4e089577bb6d4735a77-runc.BF04HJ.mount: Deactivated successfully. Jul 14 23:13:22.038636 systemd[1]: Started cri-containerd-78b2575fca0eaa08932c672f0b404c239e1adf2c37b4a4e089577bb6d4735a77.scope. Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.088777 kernel: kauditd_printk_skb: 50 callbacks suppressed Jul 14 23:13:22.094118 kernel: audit: type=1400 audit(1752534802.057:1447): avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.094788 kernel: audit: type=1300 audit(1752534802.057:1447): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=7fcc38687d18 items=0 ppid=3811 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:22.094815 kernel: audit: type=1327 audit(1752534802.057:1447): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623235373566636130656161303839333263363732663062343034 Jul 14 23:13:22.094838 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.094860 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.094876 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.094891 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.094920 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.095307 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.095329 kernel: audit: type=1400 audit(1752534802.057:1448): avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001996b0 a2=3c a3=7fcc38687d18 items=0 ppid=3811 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:22.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623235373566636130656161303839333263363732663062343034 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit: BPF prog-id=227 op=LOAD Jul 14 23:13:22.057000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001999d8 a2=78 a3=c0003e8308 items=0 ppid=3811 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:22.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623235373566636130656161303839333263363732663062343034 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit: BPF prog-id=228 op=LOAD Jul 14 23:13:22.057000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000199770 a2=78 a3=c0003e8358 items=0 ppid=3811 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:22.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623235373566636130656161303839333263363732663062343034 Jul 14 23:13:22.057000 audit: BPF prog-id=228 op=UNLOAD Jul 14 23:13:22.057000 audit: BPF prog-id=227 op=UNLOAD Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { perfmon } for pid=4756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit[4756]: AVC avc: denied { bpf } for pid=4756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:13:22.057000 audit: BPF prog-id=229 op=LOAD Jul 14 23:13:22.057000 audit[4756]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000199c30 a2=78 a3=c0003e83e8 items=0 ppid=3811 pid=4756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:22.057000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3738623235373566636130656161303839333263363732663062343034 Jul 14 23:13:22.115586 env[1250]: time="2025-07-14T23:13:22.097566593Z" level=info msg="StartContainer for \"78b2575fca0eaa08932c672f0b404c239e1adf2c37b4a4e089577bb6d4735a77\" returns successfully" Jul 14 23:13:28.070291 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4260324012.mount: Deactivated successfully. Jul 14 23:13:28.959782 env[1250]: time="2025-07-14T23:13:28.959688699Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:29.054852 env[1250]: time="2025-07-14T23:13:28.980190138Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:29.054852 env[1250]: time="2025-07-14T23:13:28.999533754Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:29.054852 env[1250]: time="2025-07-14T23:13:29.033776734Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 14 23:13:29.054852 env[1250]: time="2025-07-14T23:13:29.033943174Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:22.917 [WARNING][4745] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4", ResourceVersion:"981", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0", Pod:"calico-apiserver-866fb9ff9d-grs5p", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali8784943ba53", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:22.923 [INFO][4745] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:22.923 [INFO][4745] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" iface="eth0" netns="" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:22.923 [INFO][4745] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:22.923 [INFO][4745] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.501 [INFO][4788] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.577 [INFO][4788] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.588 [INFO][4788] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.759 [WARNING][4788] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.759 [INFO][4788] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" HandleID="k8s-pod-network.3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.763 [INFO][4788] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:29.932410 env[1250]: 2025-07-14 23:13:29.856 [INFO][4745] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d" Jul 14 23:13:29.932410 env[1250]: time="2025-07-14T23:13:29.931743830Z" level=info msg="TearDown network for sandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" successfully" Jul 14 23:13:29.949892 env[1250]: time="2025-07-14T23:13:29.942971218Z" level=info msg="RemovePodSandbox \"3c8cd8d2cc21bb551b4a8afeb30bcba206ca75d4ce51072314edb2d2f67dc75d\" returns successfully" Jul 14 23:13:31.603968 kubelet[2104]: I0714 23:13:31.554834 2104 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 14 23:13:31.641322 env[1250]: time="2025-07-14T23:13:31.603657790Z" level=info msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:34.842 [WARNING][4841] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"65aa8c25-c100-4c4d-b765-2e9deaf1c86c", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4", Pod:"coredns-7c65d6cfc9-vjmsz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali206934f96fa", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:34.931 [INFO][4841] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:34.936 [INFO][4841] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" iface="eth0" netns="" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:34.938 [INFO][4841] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:34.938 [INFO][4841] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:36.492 [INFO][4904] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:36.585 [INFO][4904] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:36.595 [INFO][4904] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:36.993 [WARNING][4904] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:36.993 [INFO][4904] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:36.995 [INFO][4904] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:37.046599 env[1250]: 2025-07-14 23:13:37.017 [INFO][4841] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:37.046599 env[1250]: time="2025-07-14T23:13:37.044771847Z" level=info msg="TearDown network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" successfully" Jul 14 23:13:37.046599 env[1250]: time="2025-07-14T23:13:37.044799659Z" level=info msg="StopPodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" returns successfully" Jul 14 23:13:38.117663 env[1250]: time="2025-07-14T23:13:38.117636449Z" level=info msg="RemovePodSandbox for \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" Jul 14 23:13:38.117663 env[1250]: time="2025-07-14T23:13:38.117659542Z" level=info msg="Forcibly stopping sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\"" Jul 14 23:13:38.582048 kubelet[2104]: E0714 23:13:38.582016 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:13:38.775482074 +0000 UTC m=+100.990005178 (durationBeforeRetry 500ms). Error: RegisterPlugin error -- failed to get plugin info using RPC GetInfo at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: rpc error: code = DeadlineExceeded desc = context deadline exceeded Jul 14 23:13:38.770547 kubelet[2104]: I0714 23:13:38.490426 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-k88bl" podStartSLOduration=48.733593813 podStartE2EDuration="1m23.3305509s" podCreationTimestamp="2025-07-14 23:12:15 +0000 UTC" firstStartedPulling="2025-07-14 23:12:46.810095236 +0000 UTC m=+49.024618339" lastFinishedPulling="2025-07-14 23:13:21.407052321 +0000 UTC m=+83.621575426" observedRunningTime="2025-07-14 23:13:23.447148633 +0000 UTC m=+85.661671744" watchObservedRunningTime="2025-07-14 23:13:38.3305509 +0000 UTC m=+100.545074006" Jul 14 23:13:39.370410 env[1250]: time="2025-07-14T23:13:39.370376640Z" level=info msg="CreateContainer within sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 14 23:13:39.494649 env[1250]: time="2025-07-14T23:13:39.494575174Z" level=info msg="CreateContainer within sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\"" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:39.352 [WARNING][4921] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"65aa8c25-c100-4c4d-b765-2e9deaf1c86c", ResourceVersion:"1031", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4", Pod:"coredns-7c65d6cfc9-vjmsz", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali206934f96fa", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:39.381 [INFO][4921] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:39.381 [INFO][4921] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" iface="eth0" netns="" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:39.384 [INFO][4921] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:39.384 [INFO][4921] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.025 [INFO][4928] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.038 [INFO][4928] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.040 [INFO][4928] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.127 [WARNING][4928] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.128 [INFO][4928] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" HandleID="k8s-pod-network.c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.129 [INFO][4928] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:13:40.160072 env[1250]: 2025-07-14 23:13:40.142 [INFO][4921] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07" Jul 14 23:13:40.199983 env[1250]: time="2025-07-14T23:13:40.160092095Z" level=info msg="TearDown network for sandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" successfully" Jul 14 23:13:40.199983 env[1250]: time="2025-07-14T23:13:40.184116017Z" level=info msg="RemovePodSandbox \"c0c93465ed95a5087ade0affe1e6d73d0f811840072c792d84c77fa194a9cd07\" returns successfully" Jul 14 23:13:43.885203 systemd[1]: Started sshd@7-139.178.70.103:22-139.178.89.65:40182.service. Jul 14 23:13:44.063250 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 14 23:13:44.069212 kernel: audit: type=1130 audit(1752534823.896:1453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.103:22-139.178.89.65:40182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:13:43.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.103:22-139.178.89.65:40182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:13:44.641066 sshd[4935]: Accepted publickey for core from 139.178.89.65 port 40182 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:13:44.744486 kernel: audit: type=1101 audit(1752534824.640:1454): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.755772 kernel: audit: type=1103 audit(1752534824.663:1455): pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.755825 kernel: audit: type=1006 audit(1752534824.663:1456): pid=4935 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 14 23:13:44.760692 kernel: audit: type=1300 audit(1752534824.663:1456): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffea5fdb00 a2=3 a3=0 items=0 ppid=1 pid=4935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:44.760721 kernel: audit: type=1327 audit(1752534824.663:1456): proctitle=737368643A20636F7265205B707269765D Jul 14 23:13:44.640000 audit[4935]: USER_ACCT pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.663000 audit[4935]: CRED_ACQ pid=4935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.663000 audit[4935]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffea5fdb00 a2=3 a3=0 items=0 ppid=1 pid=4935 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:13:44.663000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:13:44.678235 sshd[4935]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:13:44.904550 systemd-logind[1242]: New session 10 of user core. Jul 14 23:13:44.906901 systemd[1]: Started session-10.scope. Jul 14 23:13:44.926100 kernel: audit: type=1105 audit(1752534824.920:1457): pid=4935 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.920000 audit[4935]: USER_START pid=4935 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.950000 audit[4940]: CRED_ACQ pid=4940 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:44.954438 kernel: audit: type=1103 audit(1752534824.950:1458): pid=4940 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:13:51.971000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:13:52.251787 kernel: audit: type=1400 audit(1752534831.971:1459): avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:13:52.282552 kernel: audit: type=1300 audit(1752534831.971:1459): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f34880 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:13:52.282631 kernel: audit: type=1327 audit(1752534831.971:1459): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:13:52.289748 kernel: audit: type=1400 audit(1752534832.238:1460): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:13:52.291762 kernel: audit: type=1300 audit(1752534832.238:1460): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050820 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:13:52.298269 kernel: audit: type=1327 audit(1752534832.238:1460): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:13:51.971000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f34880 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:13:51.971000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:13:52.238000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:13:52.238000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050820 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:13:52.238000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:13:54.217000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.410888 kernel: audit: type=1400 audit(1752534834.217:1461): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.445369 kernel: audit: type=1400 audit(1752534834.218:1462): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.452597 kernel: audit: type=1300 audit(1752534834.218:1462): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00234c0c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:54.473322 kernel: audit: type=1327 audit(1752534834.218:1462): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:54.218000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.218000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00234c0c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:54.218000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:54.217000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0031005a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:54.217000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:54.941000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.941000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c006a926e0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:13:54.941000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:54.948000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.948000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c006a92700 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:13:54.948000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:54.978000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.978000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c006a19ce0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:13:54.978000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:54.997000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:54.997000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c009e767b0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:13:54.997000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:55.064000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.064000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c006a19e00 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:13:55.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:55.064000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:55.064000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c006a19e30 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:13:55.064000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:13:57.887290 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:13:58.115579 kernel: audit: type=1400 audit(1752534837.868:1469): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:58.141754 kernel: audit: type=1300 audit(1752534837.868:1469): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0031006e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:58.145491 kernel: audit: type=1327 audit(1752534837.868:1469): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:58.156294 kernel: audit: type=1400 audit(1752534837.895:1470): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:58.158889 kernel: audit: type=1300 audit(1752534837.895:1470): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001f39c80 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:58.163530 kernel: audit: type=1327 audit(1752534837.895:1470): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:58.163584 kernel: audit: type=1400 audit(1752534837.979:1471): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:58.163614 kernel: audit: type=1300 audit(1752534837.979:1471): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c003100940 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:58.181971 kernel: audit: type=1327 audit(1752534837.979:1471): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:58.191133 kernel: audit: type=1400 audit(1752534838.095:1472): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:57.868000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:57.868000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0031006e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:57.868000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:57.895000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:57.895000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001f39c80 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:57.895000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:57.979000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:57.979000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c003100940 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:57.979000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:13:58.095000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:13:58.095000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c001f39e00 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:13:58.095000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:13.596815 env[1250]: time="2025-07-14T23:14:13.592450156Z" level=info msg="StopPodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\"" Jul 14 23:14:13.596815 env[1250]: time="2025-07-14T23:14:13.592982990Z" level=info msg="StartContainer for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\"" Jul 14 23:14:13.717582 systemd[1]: Started cri-containerd-9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43.scope. Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.761871 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:14:13.767392 kernel: audit: type=1400 audit(1752534853.746:1473): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.771448 kernel: audit: type=1400 audit(1752534853.746:1474): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.771491 kernel: audit: type=1400 audit(1752534853.746:1475): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.771750 kernel: audit: type=1400 audit(1752534853.746:1476): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.771893 kernel: audit: type=1400 audit(1752534853.746:1477): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.772903 kernel: audit: type=1400 audit(1752534853.746:1478): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.773454 kernel: audit: type=1400 audit(1752534853.746:1479): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.773490 kernel: audit: type=1400 audit(1752534853.746:1480): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.773510 kernel: audit: type=1400 audit(1752534853.746:1481): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.777735 kernel: audit: type=1400 audit(1752534853.746:1482): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit: BPF prog-id=230 op=LOAD Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4017 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:13.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363939363563323337306633643562313364353636326533623431 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4017 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:13.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363939363563323337306633643562313364353636326533623431 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.746000 audit: BPF prog-id=231 op=LOAD Jul 14 23:14:13.746000 audit[4979]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0002e9200 items=0 ppid=4017 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:13.746000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363939363563323337306633643562313364353636326533623431 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.747000 audit: BPF prog-id=232 op=LOAD Jul 14 23:14:13.747000 audit[4979]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0002e9248 items=0 ppid=4017 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:13.747000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363939363563323337306633643562313364353636326533623431 Jul 14 23:14:13.756000 audit: BPF prog-id=232 op=UNLOAD Jul 14 23:14:13.756000 audit: BPF prog-id=231 op=UNLOAD Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { perfmon } for pid=4979 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit[4979]: AVC avc: denied { bpf } for pid=4979 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:14:13.756000 audit: BPF prog-id=233 op=LOAD Jul 14 23:14:13.756000 audit[4979]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0002e9658 items=0 ppid=4017 pid=4979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:13.756000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3963363939363563323337306633643562313364353636326533623431 Jul 14 23:14:13.802977 env[1250]: time="2025-07-14T23:14:13.802954910Z" level=info msg="StartContainer for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" returns successfully" Jul 14 23:14:13.858859 kubelet[2104]: E0714 23:14:13.858734 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:14:14.570442151 +0000 UTC m=+136.784965263 (durationBeforeRetry 1s). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:14.943 [WARNING][4991] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--mng8c-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789", Pod:"goldmane-58fd7646b9-mng8c", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8888556bd85", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:14.989 [INFO][4991] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:14.990 [INFO][4991] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" iface="eth0" netns="" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:14.994 [INFO][4991] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:14.994 [INFO][4991] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:15.992 [INFO][5015] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:16.014 [INFO][5015] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:16.022 [INFO][5015] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:17.215 [WARNING][5015] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:17.282 [INFO][5015] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:17.458 [INFO][5015] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:14:17.598504 env[1250]: 2025-07-14 23:14:17.544 [INFO][4991] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:14:17.598504 env[1250]: time="2025-07-14T23:14:17.596326795Z" level=info msg="TearDown network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" successfully" Jul 14 23:14:17.598504 env[1250]: time="2025-07-14T23:14:17.596347913Z" level=info msg="StopPodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" returns successfully" Jul 14 23:14:31.286000 audit[5052]: NETFILTER_CFG table=filter:119 family=2 entries=13 op=nft_register_rule pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:31.485169 kernel: kauditd_printk_skb: 47 callbacks suppressed Jul 14 23:14:31.501758 kernel: audit: type=1325 audit(1752534871.286:1491): table=filter:119 family=2 entries=13 op=nft_register_rule pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:31.501813 kernel: audit: type=1300 audit(1752534871.286:1491): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe9051de20 a2=0 a3=7ffe9051de0c items=0 ppid=2207 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:31.503678 kernel: audit: type=1327 audit(1752534871.286:1491): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:31.503700 kernel: audit: type=1325 audit(1752534871.300:1492): table=nat:120 family=2 entries=27 op=nft_unregister_chain pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:31.503716 kernel: audit: type=1300 audit(1752534871.300:1492): arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7ffe9051de20 a2=0 a3=7ffe9051de0c items=0 ppid=2207 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:31.510607 kernel: audit: type=1327 audit(1752534871.300:1492): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:31.286000 audit[5052]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe9051de20 a2=0 a3=7ffe9051de0c items=0 ppid=2207 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:31.286000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:31.300000 audit[5052]: NETFILTER_CFG table=nat:120 family=2 entries=27 op=nft_unregister_chain pid=5052 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:31.300000 audit[5052]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7ffe9051de20 a2=0 a3=7ffe9051de0c items=0 ppid=2207 pid=5052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:31.300000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:33.066000 audit[5054]: NETFILTER_CFG table=filter:121 family=2 entries=14 op=nft_register_rule pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:33.328233 kernel: audit: type=1325 audit(1752534873.066:1493): table=filter:121 family=2 entries=14 op=nft_register_rule pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:33.342710 kernel: audit: type=1300 audit(1752534873.066:1493): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffce3f6f690 a2=0 a3=7ffce3f6f67c items=0 ppid=2207 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:33.345093 kernel: audit: type=1327 audit(1752534873.066:1493): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:33.345121 kernel: audit: type=1325 audit(1752534873.123:1494): table=nat:122 family=2 entries=56 op=nft_unregister_chain pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:33.066000 audit[5054]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffce3f6f690 a2=0 a3=7ffce3f6f67c items=0 ppid=2207 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:33.066000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:33.123000 audit[5054]: NETFILTER_CFG table=nat:122 family=2 entries=56 op=nft_unregister_chain pid=5054 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:33.123000 audit[5054]: SYSCALL arch=c000003e syscall=46 success=yes exit=14580 a0=3 a1=7ffce3f6f690 a2=0 a3=7ffce3f6f67c items=0 ppid=2207 pid=5054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:33.123000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:45.234135 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:14:45.318238 kernel: audit: type=1325 audit(1752534885.225:1495): table=filter:123 family=2 entries=17 op=nft_register_rule pid=5059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:45.325313 kernel: audit: type=1300 audit(1752534885.225:1495): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc06f8b8a0 a2=0 a3=7ffc06f8b88c items=0 ppid=2207 pid=5059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:45.327066 kernel: audit: type=1327 audit(1752534885.225:1495): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:45.328634 kernel: audit: type=1325 audit(1752534885.243:1496): table=nat:124 family=2 entries=35 op=nft_unregister_chain pid=5059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:45.330576 kernel: audit: type=1300 audit(1752534885.243:1496): arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffc06f8b8a0 a2=0 a3=7ffc06f8b88c items=0 ppid=2207 pid=5059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:45.332314 kernel: audit: type=1327 audit(1752534885.243:1496): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:45.225000 audit[5059]: NETFILTER_CFG table=filter:123 family=2 entries=17 op=nft_register_rule pid=5059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:45.225000 audit[5059]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc06f8b8a0 a2=0 a3=7ffc06f8b88c items=0 ppid=2207 pid=5059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:45.225000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:45.243000 audit[5059]: NETFILTER_CFG table=nat:124 family=2 entries=35 op=nft_unregister_chain pid=5059 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:45.243000 audit[5059]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffc06f8b8a0 a2=0 a3=7ffc06f8b88c items=0 ppid=2207 pid=5059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:45.243000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:50.460000 audit[5062]: NETFILTER_CFG table=filter:125 family=2 entries=21 op=nft_register_rule pid=5062 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:50.779089 kernel: audit: type=1325 audit(1752534890.460:1497): table=filter:125 family=2 entries=21 op=nft_register_rule pid=5062 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:50.823991 kernel: audit: type=1300 audit(1752534890.460:1497): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd3b43c970 a2=0 a3=7ffd3b43c95c items=0 ppid=2207 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:50.834689 kernel: audit: type=1327 audit(1752534890.460:1497): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:50.834745 kernel: audit: type=1325 audit(1752534890.491:1498): table=nat:126 family=2 entries=19 op=nft_unregister_chain pid=5062 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:50.845217 kernel: audit: type=1300 audit(1752534890.491:1498): arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffd3b43c970 a2=0 a3=0 items=0 ppid=2207 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:50.845270 kernel: audit: type=1327 audit(1752534890.491:1498): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:50.460000 audit[5062]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffd3b43c970 a2=0 a3=7ffd3b43c95c items=0 ppid=2207 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:50.460000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:50.491000 audit[5062]: NETFILTER_CFG table=nat:126 family=2 entries=19 op=nft_unregister_chain pid=5062 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:14:50.491000 audit[5062]: SYSCALL arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffd3b43c970 a2=0 a3=0 items=0 ppid=2207 pid=5062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:14:50.491000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:14:52.799000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:14:53.771236 kernel: audit: type=1400 audit(1752534892.799:1499): avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:14:53.931412 kernel: audit: type=1300 audit(1752534892.799:1499): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013241c0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:14:53.940264 kernel: audit: type=1327 audit(1752534892.799:1499): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:14:53.947391 kernel: audit: type=1400 audit(1752534892.839:1500): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:14:52.799000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013241c0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:14:52.799000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:14:52.839000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:14:52.839000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050ae0 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:14:52.839000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:14:54.541000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:54.541000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000a3aa50 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:14:54.541000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:54.659000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:54.659000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0023231c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:14:54.659000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:55.866290 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 14 23:14:55.987105 kernel: audit: type=1400 audit(1752534895.861:1503): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.024892 kernel: audit: type=1300 audit(1752534895.861:1503): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c01493cec0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.030641 kernel: audit: type=1327 audit(1752534895.861:1503): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.039182 kernel: audit: type=1400 audit(1752534895.899:1504): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.039215 kernel: audit: type=1300 audit(1752534895.899:1504): arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c013e80840 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.045910 kernel: audit: type=1327 audit(1752534895.899:1504): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:55.861000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:55.861000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c01493cec0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.222276 kernel: audit: type=1400 audit(1752534896.136:1505): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.222360 kernel: audit: type=1300 audit(1752534896.136:1505): arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c01446f3b0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.222386 kernel: audit: type=1327 audit(1752534896.136:1505): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:55.861000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:55.899000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:55.899000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c013e80840 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:55.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.136000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.136000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c01446f3b0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.136000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.350000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.350000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c01446f3e0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.358464 kernel: audit: type=1400 audit(1752534896.350:1506): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.350000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.365000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.365000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c01446f410 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.365000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:56.365000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:56.365000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c015118560 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:14:56.365000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:14:58.256000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:58.256000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0003f7c60 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:14:58.256000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:58.307000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:58.307000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0023232a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:14:58.307000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:58.326000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:58.326000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0023232c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:14:58.326000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:14:58.401000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:14:58.401000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002323460 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:14:58.401000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:12.311380 kubelet[2104]: W0714 23:14:18.619712 2104 logging.go:55] [core] [Channel #17 SubChannel #18]grpc: addrConn.createTransport failed to connect to {Addr: "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock", ServerName: "%2Fvar%2Flib%2Fkubelet%2Fplugins_registry%2Fcsi.tigera.io-reg.sock", }. Err: connection error: desc = "transport: Error while dialing: dial unix /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock: i/o timeout" Jul 14 23:15:24.800650 env[1250]: time="2025-07-14T23:15:24.779605371Z" level=info msg="RemovePodSandbox for \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\"" Jul 14 23:15:24.800650 env[1250]: time="2025-07-14T23:15:24.779650949Z" level=info msg="Forcibly stopping sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\"" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:28.436 [WARNING][5079] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--mng8c-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee", ResourceVersion:"1053", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 14, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789", Pod:"goldmane-58fd7646b9-mng8c", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali8888556bd85", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:28.477 [INFO][5079] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:28.478 [INFO][5079] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" iface="eth0" netns="" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:28.480 [INFO][5079] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:28.480 [INFO][5079] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:28.967 [INFO][5094] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:29.008 [INFO][5094] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:29.012 [INFO][5094] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:29.168 [WARNING][5094] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:29.168 [INFO][5094] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" HandleID="k8s-pod-network.a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:29.172 [INFO][5094] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:15:29.242259 env[1250]: 2025-07-14 23:15:29.204 [INFO][5079] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6" Jul 14 23:15:29.242259 env[1250]: time="2025-07-14T23:15:29.233844557Z" level=info msg="TearDown network for sandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" successfully" Jul 14 23:15:29.348840 env[1250]: time="2025-07-14T23:15:29.251697131Z" level=info msg="RemovePodSandbox \"a2fb8939478f1e919a6e34461cd3c193e2ccb6d71107e4acfca54c31335c70e6\" returns successfully" Jul 14 23:15:33.664172 kubelet[2104]: E0714 23:15:33.311609 2104 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": context deadline exceeded" Jul 14 23:15:38.509606 sshd[4935]: pam_unix(sshd:session): session closed for user core Jul 14 23:15:38.623739 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:15:38.627400 kernel: audit: type=1106 audit(1752534938.572:1513): pid=4935 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.629820 kernel: audit: type=1104 audit(1752534938.577:1514): pid=4935 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.629876 kernel: audit: type=1131 audit(1752534938.588:1515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.103:22-139.178.89.65:40182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:38.572000 audit[4935]: USER_END pid=4935 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.577000 audit[4935]: CRED_DISP pid=4935 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:38.588000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.103:22-139.178.89.65:40182 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:38.583073 systemd[1]: sshd@7-139.178.70.103:22-139.178.89.65:40182.service: Deactivated successfully. Jul 14 23:15:38.593884 systemd[1]: session-10.scope: Deactivated successfully. Jul 14 23:15:38.594014 systemd[1]: session-10.scope: Consumed 9.387s CPU time. Jul 14 23:15:38.597236 systemd-logind[1242]: Session 10 logged out. Waiting for processes to exit. Jul 14 23:15:38.611717 systemd-logind[1242]: Removed session 10. Jul 14 23:15:41.915926 env[1250]: time="2025-07-14T23:15:41.903692855Z" level=info msg="StopPodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\"" Jul 14 23:15:43.715888 systemd[1]: Started sshd@8-139.178.70.103:22-139.178.89.65:40662.service. Jul 14 23:15:43.932975 kernel: audit: type=1130 audit(1752534943.722:1516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.103:22-139.178.89.65:40662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:43.722000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.103:22-139.178.89.65:40662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:15:44.640000 audit[5214]: USER_ACCT pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.883815 kernel: audit: type=1101 audit(1752534944.640:1517): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.925877 kernel: audit: type=1103 audit(1752534944.857:1518): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.953249 kernel: audit: type=1006 audit(1752534944.877:1519): pid=5214 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 14 23:15:44.966887 kernel: audit: type=1300 audit(1752534944.877:1519): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd09775720 a2=3 a3=0 items=0 ppid=1 pid=5214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:15:44.966936 kernel: audit: type=1327 audit(1752534944.877:1519): proctitle=737368643A20636F7265205B707269765D Jul 14 23:15:44.857000 audit[5214]: CRED_ACQ pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:44.877000 audit[5214]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd09775720 a2=3 a3=0 items=0 ppid=1 pid=5214 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:15:44.877000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:15:45.124192 sshd[5214]: Accepted publickey for core from 139.178.89.65 port 40662 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:15:44.944577 sshd[5214]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:15:45.465992 systemd-logind[1242]: New session 11 of user core. Jul 14 23:15:45.466017 systemd[1]: Started session-11.scope. Jul 14 23:15:45.574513 kernel: audit: type=1105 audit(1752534945.543:1520): pid=5214 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:45.543000 audit[5214]: USER_START pid=5214 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:45.624000 audit[5217]: CRED_ACQ pid=5217 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:45.630441 kernel: audit: type=1103 audit(1752534945.624:1521): pid=5217 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:15:47.100658 env[1250]: time="2025-07-14T23:15:47.092630098Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:15:47.369233 env[1250]: time="2025-07-14T23:15:47.120069932Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:15:52.942000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:15:53.163911 kernel: audit: type=1400 audit(1752534952.942:1522): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:15:53.170151 kernel: audit: type=1300 audit(1752534952.942:1522): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010508c0 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:15:53.170218 kernel: audit: type=1327 audit(1752534952.942:1522): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:53.170251 kernel: audit: type=1400 audit(1752534952.965:1523): avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:15:53.170269 kernel: audit: type=1300 audit(1752534952.965:1523): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f34040 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:15:53.171168 kernel: audit: type=1327 audit(1752534952.965:1523): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:52.942000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010508c0 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:15:52.942000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:52.965000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:15:52.965000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000f34040 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:15:52.965000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:50.465 [WARNING][5198] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" WorkloadEndpoint="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:50.520 [INFO][5198] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:50.521 [INFO][5198] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" iface="eth0" netns="" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:50.525 [INFO][5198] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:50.525 [INFO][5198] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:53.237 [INFO][5230] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:53.291 [INFO][5230] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:53.306 [INFO][5230] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:54.390 [WARNING][5230] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:54.423 [INFO][5230] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:54.516 [INFO][5230] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:15:54.585032 env[1250]: 2025-07-14 23:15:54.554 [INFO][5198] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:15:54.585032 env[1250]: time="2025-07-14T23:15:54.593218091Z" level=info msg="TearDown network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" successfully" Jul 14 23:15:54.585032 env[1250]: time="2025-07-14T23:15:54.593242661Z" level=info msg="StopPodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" returns successfully" Jul 14 23:15:54.905000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:54.940272 kernel: audit: type=1400 audit(1752534954.905:1524): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:54.946520 kernel: audit: type=1300 audit(1752534954.905:1524): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009d6680 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:54.947411 kernel: audit: type=1327 audit(1752534954.905:1524): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:54.949666 kernel: audit: type=1400 audit(1752534954.905:1525): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:54.905000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009d6680 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:54.905000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:54.905000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:54.905000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0014b24e0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:54.905000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:56.370000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.370000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.370000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0112ab700 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:15:56.370000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.370000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c005102e60 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:15:56.370000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.370000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.370000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00df82150 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:15:56.370000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.376000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.376000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c013a38de0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:15:56.376000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.463000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.463000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00e218fc0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:15:56.463000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:56.667000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:56.667000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c005141080 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:15:56.667000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:15:58.189766 kubelet[2104]: E0714 23:15:56.915501 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:15:41.11787254 +0000 UTC m=+223.332395651 (durationBeforeRetry 2s). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:15:58.384592 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:15:58.419338 kernel: audit: type=1400 audit(1752534958.379:1532): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.427804 kernel: audit: type=1300 audit(1752534958.379:1532): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00083c840 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.428961 kernel: audit: type=1327 audit(1752534958.379:1532): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:58.429973 kernel: audit: type=1400 audit(1752534958.385:1533): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.430006 kernel: audit: type=1300 audit(1752534958.385:1533): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00083c860 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.430025 kernel: audit: type=1327 audit(1752534958.385:1533): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:58.433946 kernel: audit: type=1400 audit(1752534958.411:1534): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.433985 kernel: audit: type=1300 audit(1752534958.411:1534): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009d6ca0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.434007 kernel: audit: type=1327 audit(1752534958.411:1534): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:58.434027 kernel: audit: type=1400 audit(1752534958.429:1535): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.379000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.379000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00083c840 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.379000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:58.385000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.385000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00083c860 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.385000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:58.411000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.411000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0009d6ca0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:15:58.429000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:15:58.429000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00083ca40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:15:58.429000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:14.470309 kubelet[2104]: E0714 23:15:58.468161 2104 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2m10.56s" Jul 14 23:16:22.359589 sshd[5214]: pam_unix(sshd:session): session closed for user core Jul 14 23:16:22.482342 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:16:22.488225 kernel: audit: type=1106 audit(1752534982.420:1536): pid=5214 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:22.493608 kernel: audit: type=1104 audit(1752534982.427:1537): pid=5214 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:22.494585 kernel: audit: type=1131 audit(1752534982.453:1538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.103:22-139.178.89.65:40662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:22.420000 audit[5214]: USER_END pid=5214 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:22.427000 audit[5214]: CRED_DISP pid=5214 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:22.453000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.103:22-139.178.89.65:40662 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:22.451350 systemd[1]: sshd@8-139.178.70.103:22-139.178.89.65:40662.service: Deactivated successfully. Jul 14 23:16:22.454994 systemd[1]: session-11.scope: Deactivated successfully. Jul 14 23:16:22.455093 systemd[1]: session-11.scope: Consumed 3.411s CPU time. Jul 14 23:16:22.459420 systemd-logind[1242]: Session 11 logged out. Waiting for processes to exit. Jul 14 23:16:22.474942 systemd-logind[1242]: Removed session 11. Jul 14 23:16:22.970156 kubelet[2104]: E0714 23:16:22.968818 2104 kubelet_node_status.go:535] "Error updating node status, will retry" err="failed to patch status \"{\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"NetworkUnavailable\\\"},{\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"type\\\":\\\"DiskPressure\\\"},{\\\"type\\\":\\\"PIDPressure\\\"},{\\\"type\\\":\\\"Ready\\\"}],\\\"conditions\\\":[{\\\"lastHeartbeatTime\\\":\\\"2025-07-14T23:13:38Z\\\",\\\"type\\\":\\\"MemoryPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-07-14T23:13:38Z\\\",\\\"type\\\":\\\"DiskPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-07-14T23:13:38Z\\\",\\\"type\\\":\\\"PIDPressure\\\"},{\\\"lastHeartbeatTime\\\":\\\"2025-07-14T23:13:38Z\\\",\\\"type\\\":\\\"Ready\\\"}],\\\"images\\\":[{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760\\\",\\\"ghcr.io/flatcar/calico/node:v3.30.2\\\"],\\\"sizeBytes\\\":158500025},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d\\\",\\\"ghcr.io/flatcar/calico/cni:v3.30.2\\\"],\\\"sizeBytes\\\":71928924},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305\\\",\\\"ghcr.io/flatcar/calico/goldmane:v3.30.2\\\"],\\\"sizeBytes\\\":66352154},{\\\"names\\\":[\\\"registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a\\\",\\\"registry.k8s.io/etcd:3.5.15-0\\\"],\\\"sizeBytes\\\":56909194},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce\\\",\\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\\\"],\\\"sizeBytes\\\":52769359},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b\\\",\\\"ghcr.io/flatcar/calico/apiserver:v3.30.2\\\"],\\\"sizeBytes\\\":48810696},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af\\\",\\\"ghcr.io/flatcar/calico/typha:v3.30.2\\\"],\\\"sizeBytes\\\":35233218},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5\\\",\\\"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\\\"],\\\"sizeBytes\\\":33083307},{\\\"names\\\":[\\\"registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d\\\",\\\"registry.k8s.io/kube-proxy:v1.31.10\\\"],\\\"sizeBytes\\\":30382962},{\\\"names\\\":[\\\"registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc\\\",\\\"registry.k8s.io/kube-apiserver:v1.31.10\\\"],\\\"sizeBytes\\\":28074544},{\\\"names\\\":[\\\"registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe\\\",\\\"registry.k8s.io/kube-controller-manager:v1.31.10\\\"],\\\"sizeBytes\\\":26315128},{\\\"names\\\":[\\\"quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121\\\",\\\"quay.io/tigera/operator:v1.38.3\\\"],\\\"sizeBytes\\\":25052538},{\\\"names\\\":[\\\"registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272\\\",\\\"registry.k8s.io/kube-scheduler:v1.31.10\\\"],\\\"sizeBytes\\\":20385523},{\\\"names\\\":[\\\"registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e\\\",\\\"registry.k8s.io/coredns/coredns:v1.11.3\\\"],\\\"sizeBytes\\\":18562039},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f\\\",\\\"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\\\"],\\\"sizeBytes\\\":16196439},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0\\\",\\\"ghcr.io/flatcar/calico/csi:v3.30.2\\\"],\\\"sizeBytes\\\":10251893},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678\\\",\\\"ghcr.io/flatcar/calico/whisker:v3.30.2\\\"],\\\"sizeBytes\\\":6153902},{\\\"names\\\":[\\\"ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b\\\",\\\"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\\\"],\\\"sizeBytes\\\":5939619},{\\\"names\\\":[\\\"registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a\\\",\\\"registry.k8s.io/pause:3.10\\\"],\\\"sizeBytes\\\":320368},{\\\"names\\\":[\\\"registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db\\\",\\\"registry.k8s.io/pause:3.6\\\"],\\\"sizeBytes\\\":301773}]}}\" for node \"localhost\": Patch \"https://139.178.70.103:6443/api/v1/nodes/localhost/status?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 14 23:16:23.024570 kubelet[2104]: E0714 23:16:23.011484 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-ready"] Jul 14 23:16:23.089059 kubelet[2104]: W0714 23:16:22.678711 2104 logging.go:55] [core] [Channel #19 SubChannel #20]grpc: addrConn.createTransport failed to connect to {Addr: "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock", ServerName: "%2Fvar%2Flib%2Fkubelet%2Fplugins_registry%2Fcsi.tigera.io-reg.sock", }. Err: connection error: desc = "transport: Error while dialing: dial unix /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock: operation was canceled" Jul 14 23:16:23.181541 kubelet[2104]: E0714 23:16:23.181488 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-live"] Jul 14 23:16:23.207843 env[1250]: time="2025-07-14T23:16:23.207813346Z" level=info msg="RemovePodSandbox for \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\"" Jul 14 23:16:23.207843 env[1250]: time="2025-07-14T23:16:23.207838526Z" level=info msg="Forcibly stopping sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\"" Jul 14 23:16:23.222339 kubelet[2104]: E0714 23:16:22.966748 2104 kubelet.go:2345] "Skipping pod synchronization" err="container runtime is down" Jul 14 23:16:23.257658 kubelet[2104]: E0714 23:16:23.257610 2104 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": context deadline exceeded" Jul 14 23:16:23.839433 systemd[1]: run-containerd-runc-k8s.io-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2-runc.tGdZ7u.mount: Deactivated successfully. Jul 14 23:16:28.089452 systemd[1]: Started sshd@9-139.178.70.103:22-139.178.89.65:53226.service. Jul 14 23:16:28.329730 kernel: audit: type=1130 audit(1752534988.104:1539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.103:22-139.178.89.65:53226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:28.104000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.103:22-139.178.89.65:53226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:28.992000 audit[5389]: USER_ACCT pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.215904 kernel: audit: type=1101 audit(1752534988.992:1540): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.233462 kernel: audit: type=1103 audit(1752534989.117:1541): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.237167 kernel: audit: type=1006 audit(1752534989.117:1542): pid=5389 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 14 23:16:29.237221 kernel: audit: type=1300 audit(1752534989.117:1542): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7f5e3d00 a2=3 a3=0 items=0 ppid=1 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:29.244379 kernel: audit: type=1327 audit(1752534989.117:1542): proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:29.117000 audit[5389]: CRED_ACQ pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.117000 audit[5389]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff7f5e3d00 a2=3 a3=0 items=0 ppid=1 pid=5389 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:29.117000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:29.374300 sshd[5389]: Accepted publickey for core from 139.178.89.65 port 53226 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:16:29.155145 sshd[5389]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:16:29.535634 systemd-logind[1242]: New session 12 of user core. Jul 14 23:16:29.542844 systemd[1]: Started session-12.scope. Jul 14 23:16:29.586493 kernel: audit: type=1105 audit(1752534989.581:1543): pid=5389 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.581000 audit[5389]: USER_START pid=5389 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.617000 audit[5392]: CRED_ACQ pid=5392 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:29.625228 kernel: audit: type=1103 audit(1752534989.617:1544): pid=5392 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:25.973 [WARNING][5279] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" WorkloadEndpoint="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:26.041 [INFO][5279] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:26.043 [INFO][5279] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" iface="eth0" netns="" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:26.045 [INFO][5279] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:26.045 [INFO][5279] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:29.566 [INFO][5384] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:29.633 [INFO][5384] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:29.639 [INFO][5384] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:30.209 [WARNING][5384] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:30.232 [INFO][5384] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" HandleID="k8s-pod-network.7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Workload="localhost-k8s-whisker--7c847fc58f--bpmwn-eth0" Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:30.254 [INFO][5384] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:30.326228 env[1250]: 2025-07-14 23:16:30.294 [INFO][5279] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8" Jul 14 23:16:30.418466 env[1250]: time="2025-07-14T23:16:30.331388476Z" level=info msg="TearDown network for sandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" successfully" Jul 14 23:16:30.418466 env[1250]: time="2025-07-14T23:16:30.357868459Z" level=info msg="RemovePodSandbox \"7c3dff78ca54c2de17eaa535acd71fb2d345cdcc0faba56ea9f2236482be0af8\" returns successfully" Jul 14 23:16:43.981407 sshd[5389]: pam_unix(sshd:session): session closed for user core Jul 14 23:16:44.083886 kernel: audit: type=1106 audit(1752535004.040:1545): pid=5389 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:44.085763 kernel: audit: type=1104 audit(1752535004.044:1546): pid=5389 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:44.087231 kernel: audit: type=1131 audit(1752535004.064:1547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.103:22-139.178.89.65:53226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:44.040000 audit[5389]: USER_END pid=5389 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:44.044000 audit[5389]: CRED_DISP pid=5389 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:44.064000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.103:22-139.178.89.65:53226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:44.063343 systemd[1]: sshd@9-139.178.70.103:22-139.178.89.65:53226.service: Deactivated successfully. Jul 14 23:16:44.066885 systemd[1]: session-12.scope: Deactivated successfully. Jul 14 23:16:44.066981 systemd[1]: session-12.scope: Consumed 2.113s CPU time. Jul 14 23:16:44.071647 systemd-logind[1242]: Session 12 logged out. Waiting for processes to exit. Jul 14 23:16:44.085013 systemd-logind[1242]: Removed session 12. Jul 14 23:16:44.333851 env[1250]: time="2025-07-14T23:16:44.333724164Z" level=info msg="StopPodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\"" Jul 14 23:16:49.089481 systemd[1]: Started sshd@10-139.178.70.103:22-139.178.89.65:50842.service. Jul 14 23:16:49.178708 kernel: audit: type=1130 audit(1752535009.091:1548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.103:22-139.178.89.65:50842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:49.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.103:22-139.178.89.65:50842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:16:49.510000 audit[5481]: USER_ACCT pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:49.614566 kernel: audit: type=1101 audit(1752535009.510:1549): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:49.642320 kernel: audit: type=1103 audit(1752535009.571:1550): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:49.646029 kernel: audit: type=1006 audit(1752535009.571:1551): pid=5481 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 14 23:16:49.650323 kernel: audit: type=1300 audit(1752535009.571:1551): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7d8b4360 a2=3 a3=0 items=0 ppid=1 pid=5481 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:49.650385 kernel: audit: type=1327 audit(1752535009.571:1551): proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:49.571000 audit[5481]: CRED_ACQ pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:49.571000 audit[5481]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd7d8b4360 a2=3 a3=0 items=0 ppid=1 pid=5481 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:16:49.571000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:16:49.757728 sshd[5481]: Accepted publickey for core from 139.178.89.65 port 50842 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:16:49.595062 sshd[5481]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:16:49.965605 systemd-logind[1242]: New session 13 of user core. Jul 14 23:16:49.971530 systemd[1]: Started session-13.scope. Jul 14 23:16:50.039802 kernel: audit: type=1105 audit(1752535010.001:1552): pid=5481 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:50.058020 kernel: audit: type=1103 audit(1752535010.050:1553): pid=5486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:50.001000 audit[5481]: USER_START pid=5481 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:50.050000 audit[5486]: CRED_ACQ pid=5486 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:49.693 [WARNING][5443] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"a08d23a3-9e4e-42f3-9191-147690a8736b", ResourceVersion:"1370", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42", Pod:"calico-apiserver-866fb9ff9d-zmphk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60db47f240a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:49.955 [INFO][5443] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:49.963 [INFO][5443] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" iface="eth0" netns="" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:49.965 [INFO][5443] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:49.965 [INFO][5443] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.200 [INFO][5485] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.224 [INFO][5485] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.226 [INFO][5485] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.608 [WARNING][5485] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.652 [INFO][5485] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.696 [INFO][5485] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:16:51.814720 env[1250]: 2025-07-14 23:16:51.766 [INFO][5443] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:16:51.814720 env[1250]: time="2025-07-14T23:16:51.810630585Z" level=info msg="TearDown network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" successfully" Jul 14 23:16:51.814720 env[1250]: time="2025-07-14T23:16:51.810658031Z" level=info msg="StopPodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" returns successfully" Jul 14 23:16:53.269000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:16:53.368371 kernel: audit: type=1400 audit(1752535013.269:1554): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:16:53.378459 kernel: audit: type=1400 audit(1752535013.274:1555): avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:16:53.274000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:16:53.274000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001325300 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:16:53.274000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:16:53.269000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0011c84c0 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:16:53.269000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:16:54.965714 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 14 23:16:55.027183 kernel: audit: type=1400 audit(1752535014.960:1556): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:55.035246 kernel: audit: type=1400 audit(1752535014.964:1557): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:55.036090 kernel: audit: type=1300 audit(1752535014.964:1557): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0033603c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:55.036885 kernel: audit: type=1327 audit(1752535014.964:1557): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:55.039447 kernel: audit: type=1300 audit(1752535014.960:1556): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00323f060 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:55.039478 kernel: audit: type=1327 audit(1752535014.960:1556): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:54.960000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:54.964000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:54.964000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0033603c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:54.964000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:54.960000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00323f060 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:54.960000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:56.404000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.511727 kernel: audit: type=1400 audit(1752535016.404:1558): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.531605 kernel: audit: type=1300 audit(1752535016.404:1558): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00928b1e0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.531662 kernel: audit: type=1327 audit(1752535016.404:1558): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.534463 kernel: audit: type=1400 audit(1752535016.416:1559): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.404000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00928b1e0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.404000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.416000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.416000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00690f4d0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.416000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.430000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.430000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00928b260 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.430000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.430000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.430000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009817bc0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.430000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.466000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.466000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00690f860 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.466000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:56.672000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:56.672000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c004728000 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:16:56.672000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:16:58.169801 kubelet[2104]: E0714 23:16:48.984042 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m3.822390278s ago; threshold is 3m0s" Jul 14 23:16:58.462000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:58.462000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0035e7320 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:58.462000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:58.491000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:58.491000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0035e7340 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:58.491000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:58.498000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:58.498000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00323f2a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:58.498000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:16:58.498000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:16:58.498000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00323f2c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:16:58.498000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:29.157822 kubelet[2104]: E0714 23:17:08.135075 2104 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 3m20.759255837s ago; threshold is 3m0s]" Jul 14 23:17:31.730571 sshd[5481]: pam_unix(sshd:session): session closed for user core Jul 14 23:17:31.888285 kernel: kauditd_printk_skb: 26 callbacks suppressed Jul 14 23:17:31.898955 kernel: audit: type=1106 audit(1752535051.800:1568): pid=5481 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:31.907164 kernel: audit: type=1104 audit(1752535051.800:1569): pid=5481 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:31.907241 kernel: audit: type=1131 audit(1752535051.847:1570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.103:22-139.178.89.65:50842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:31.800000 audit[5481]: USER_END pid=5481 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:31.800000 audit[5481]: CRED_DISP pid=5481 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:31.847000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.103:22-139.178.89.65:50842 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:31.839641 systemd[1]: sshd@10-139.178.70.103:22-139.178.89.65:50842.service: Deactivated successfully. Jul 14 23:17:31.852628 systemd[1]: session-13.scope: Deactivated successfully. Jul 14 23:17:31.852741 systemd[1]: session-13.scope: Consumed 16.615s CPU time. Jul 14 23:17:31.857291 systemd-logind[1242]: Session 13 logged out. Waiting for processes to exit. Jul 14 23:17:31.887834 systemd-logind[1242]: Removed session 13. Jul 14 23:17:32.729123 kubelet[2104]: E0714 23:17:32.725867 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 3m49.962557191s ago; threshold is 3m0s" Jul 14 23:17:32.813130 env[1250]: time="2025-07-14T23:17:32.813000427Z" level=info msg="RemovePodSandbox for \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\"" Jul 14 23:17:32.813130 env[1250]: time="2025-07-14T23:17:32.813022850Z" level=info msg="Forcibly stopping sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\"" Jul 14 23:17:32.825304 kubelet[2104]: E0714 23:17:32.820255 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:17:36.683337459 +0000 UTC m=+338.897860561 (durationBeforeRetry 4s). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:17:32.841994 kubelet[2104]: W0714 23:17:32.841964 2104 logging.go:55] [core] [Channel #21 SubChannel #22]grpc: addrConn.createTransport failed to connect to {Addr: "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock", ServerName: "%2Fvar%2Flib%2Fkubelet%2Fplugins_registry%2Fcsi.tigera.io-reg.sock", }. Err: connection error: desc = "error reading server preface: read unix @->/registration/csi.tigera.io-reg.sock: use of closed network connection" Jul 14 23:17:37.074434 systemd[1]: Started sshd@11-139.178.70.103:22-139.178.89.65:33588.service. Jul 14 23:17:37.296562 kernel: audit: type=1130 audit(1752535057.085:1571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.103:22-139.178.89.65:33588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:37.085000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.103:22-139.178.89.65:33588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:17:38.010276 env[1250]: time="2025-07-14T23:17:38.010187177Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:17:38.131499 env[1250]: time="2025-07-14T23:17:38.040570454Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:17:38.165000 audit[5667]: USER_ACCT pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.213522 kernel: audit: type=1101 audit(1752535058.165:1572): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.232114 sshd[5667]: Accepted publickey for core from 139.178.89.65 port 33588 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:17:38.260783 kernel: audit: type=1103 audit(1752535058.238:1573): pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.268740 kernel: audit: type=1006 audit(1752535058.238:1574): pid=5667 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 14 23:17:38.268800 kernel: audit: type=1300 audit(1752535058.238:1574): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc47218b10 a2=3 a3=0 items=0 ppid=1 pid=5667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:38.268823 kernel: audit: type=1327 audit(1752535058.238:1574): proctitle=737368643A20636F7265205B707269765D Jul 14 23:17:38.238000 audit[5667]: CRED_ACQ pid=5667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.238000 audit[5667]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc47218b10 a2=3 a3=0 items=0 ppid=1 pid=5667 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:17:38.238000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:17:38.303304 sshd[5667]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:17:38.643809 systemd-logind[1242]: New session 14 of user core. Jul 14 23:17:38.726925 kernel: audit: type=1105 audit(1752535058.719:1575): pid=5667 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.719000 audit[5667]: USER_START pid=5667 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.658187 systemd[1]: Started session-14.scope. Jul 14 23:17:38.862995 kernel: audit: type=1103 audit(1752535058.849:1576): pid=5670 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:38.849000 audit[5670]: CRED_ACQ pid=5670 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:17:43.050028 env[1250]: time="2025-07-14T23:17:43.028068240Z" level=error msg="ExecSync for \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:44.219 [WARNING][5590] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0", GenerateName:"calico-apiserver-866fb9ff9d-", Namespace:"calico-apiserver", SelfLink:"", UID:"a08d23a3-9e4e-42f3-9191-147690a8736b", ResourceVersion:"1370", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 12, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"866fb9ff9d", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42", Pod:"calico-apiserver-866fb9ff9d-zmphk", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali60db47f240a", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:44.331 [INFO][5590] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:44.337 [INFO][5590] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" iface="eth0" netns="" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:44.337 [INFO][5590] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:44.338 [INFO][5590] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:48.727 [INFO][5679] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:48.748 [INFO][5679] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:48.750 [INFO][5679] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:49.102 [WARNING][5679] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:49.103 [INFO][5679] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" HandleID="k8s-pod-network.aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:49.121 [INFO][5679] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:17:49.561211 env[1250]: 2025-07-14 23:17:49.348 [INFO][5590] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f" Jul 14 23:17:49.561211 env[1250]: time="2025-07-14T23:17:49.542198556Z" level=info msg="TearDown network for sandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" successfully" Jul 14 23:17:50.146377 env[1250]: time="2025-07-14T23:17:49.723407947Z" level=info msg="RemovePodSandbox \"aa9a83c17e9373d0d843dab632b0065bdb412b11c039f046aefca7b53eb2f05f\" returns successfully" Jul 14 23:17:53.380000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:17:53.909963 kernel: audit: type=1400 audit(1752535073.380:1577): avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:17:53.992484 kernel: audit: type=1400 audit(1752535073.389:1578): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:17:53.992584 kernel: audit: type=1300 audit(1752535073.389:1578): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010500c0 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:17:53.992710 kernel: audit: type=1327 audit(1752535073.389:1578): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:54.008215 kernel: audit: type=1300 audit(1752535073.380:1577): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013240c0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:17:54.008318 kernel: audit: type=1327 audit(1752535073.380:1577): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:53.389000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:17:53.389000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0010500c0 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:17:53.389000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:53.380000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013240c0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:17:53.380000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:17:55.185000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:55.198252 kernel: audit: type=1400 audit(1752535075.185:1579): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:55.199962 kernel: audit: type=1300 audit(1752535075.185:1579): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002243d40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:55.200020 kernel: audit: type=1327 audit(1752535075.185:1579): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:55.185000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002243d40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:55.214548 kernel: audit: type=1400 audit(1752535075.191:1580): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:55.185000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:55.191000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:55.191000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00345b1a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:55.191000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:56.663000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.663000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c0133220f0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:17:56.663000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.666000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.666000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c015565ac0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:17:56.666000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.690000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.690000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c015565ae0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:17:56.690000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.716000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.716000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c013322120 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:17:56.716000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.716000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.716000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c013322180 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:17:56.716000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:56.760000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:56.760000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c013322240 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:17:56.760000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:17:58.638000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:58.970083 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:17:59.070884 kernel: audit: type=1400 audit(1752535078.638:1587): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:59.076875 kernel: audit: type=1300 audit(1752535078.638:1587): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00204c980 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:59.095513 kernel: audit: type=1327 audit(1752535078.638:1587): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:59.119422 kernel: audit: type=1400 audit(1752535078.652:1588): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:59.129951 kernel: audit: type=1300 audit(1752535078.652:1588): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000165900 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:59.129999 kernel: audit: type=1327 audit(1752535078.652:1588): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:59.130019 kernel: audit: type=1400 audit(1752535078.684:1589): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:59.130035 kernel: audit: type=1300 audit(1752535078.684:1589): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000165a40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:59.130052 kernel: audit: type=1327 audit(1752535078.684:1589): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:59.130068 kernel: audit: type=1400 audit(1752535078.783:1590): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:58.638000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00204c980 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:58.638000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:58.652000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:58.652000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000165900 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:58.652000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:58.684000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:58.684000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000165a40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:58.684000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:17:58.783000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:17:58.783000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c002380000 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:17:58.783000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:09.171480 kubelet[2104]: E0714 23:17:45.183994 2104 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.103:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 14 23:18:09.435815 kubelet[2104]: E0714 23:18:09.424386 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" containerID="ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 14 23:18:09.930338 env[1250]: time="2025-07-14T23:18:09.930267794Z" level=info msg="StopPodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\"" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.153 [WARNING][5705] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"68c74c57-331c-447e-bf00-1d922c415b91", ResourceVersion:"1352", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64", Pod:"coredns-7c65d6cfc9-qt22r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2061ca1db2b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.185 [INFO][5705] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.187 [INFO][5705] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" iface="eth0" netns="" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.188 [INFO][5705] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.188 [INFO][5705] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.932 [INFO][5712] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.953 [INFO][5712] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:11.958 [INFO][5712] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:12.158 [WARNING][5712] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:12.162 [INFO][5712] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:12.164 [INFO][5712] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:18:12.258033 env[1250]: 2025-07-14 23:18:12.198 [INFO][5705] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:12.258033 env[1250]: time="2025-07-14T23:18:12.251350409Z" level=info msg="TearDown network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" successfully" Jul 14 23:18:12.258033 env[1250]: time="2025-07-14T23:18:12.251380512Z" level=info msg="StopPodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" returns successfully" Jul 14 23:18:15.353960 kubelet[2104]: E0714 23:18:15.345718 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-live"] Jul 14 23:18:15.501716 kubelet[2104]: E0714 23:18:10.986208 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-ready"] Jul 14 23:18:15.533717 kubelet[2104]: E0714 23:18:13.264593 2104 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 4m27.440848878s ago; threshold is 3m0s]" Jul 14 23:18:16.130249 env[1250]: time="2025-07-14T23:18:16.129860896Z" level=info msg="RemovePodSandbox for \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\"" Jul 14 23:18:16.130249 env[1250]: time="2025-07-14T23:18:16.129892248Z" level=info msg="Forcibly stopping sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\"" Jul 14 23:18:16.183294 systemd[1]: run-containerd-runc-k8s.io-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2-runc.Wjz0Ry.mount: Deactivated successfully. Jul 14 23:18:16.243439 systemd[1]: run-containerd-runc-k8s.io-712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3-runc.MrFPvq.mount: Deactivated successfully. Jul 14 23:18:21.358591 env[1250]: time="2025-07-14T23:18:21.342110960Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:18:26.264411 env[1250]: time="2025-07-14T23:18:26.248906967Z" level=error msg="ExecSync for \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:28.671 [WARNING][5783] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"68c74c57-331c-447e-bf00-1d922c415b91", ResourceVersion:"1352", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64", Pod:"coredns-7c65d6cfc9-qt22r", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali2061ca1db2b", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:28.962 [INFO][5783] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:28.978 [INFO][5783] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" iface="eth0" netns="" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:28.984 [INFO][5783] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:28.984 [INFO][5783] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:30.726 [INFO][5803] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:30.796 [INFO][5803] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:30.809 [INFO][5803] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:32.094 [WARNING][5803] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:32.150 [INFO][5803] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" HandleID="k8s-pod-network.87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:32.191 [INFO][5803] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:18:32.270249 env[1250]: 2025-07-14 23:18:32.229 [INFO][5783] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34" Jul 14 23:18:32.270249 env[1250]: time="2025-07-14T23:18:32.264274002Z" level=info msg="TearDown network for sandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" successfully" Jul 14 23:18:32.760746 env[1250]: time="2025-07-14T23:18:32.374579993Z" level=info msg="RemovePodSandbox \"87865a2105b3c99cc4fe506644f7119f7eb5043953cc3c93dff0b35c6c16fe34\" returns successfully" Jul 14 23:18:38.530209 kubelet[2104]: E0714 23:18:38.015600 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 4m57.273800035s ago; threshold is 3m0s" Jul 14 23:18:41.166539 kubelet[2104]: E0714 23:18:38.249539 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 10s exceeded: context deadline exceeded" containerID="ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2" cmd=["/bin/calico-node","-bird-ready","-felix-ready"] Jul 14 23:18:41.256912 kubelet[2104]: E0714 23:18:41.175233 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-live"] Jul 14 23:18:44.358013 env[1250]: time="2025-07-14T23:18:44.350221872Z" level=info msg="StopPodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\"" Jul 14 23:18:45.388305 sshd[5667]: pam_unix(sshd:session): session closed for user core Jul 14 23:18:45.535570 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:18:45.544451 kernel: audit: type=1106 audit(1752535125.517:1591): pid=5667 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:45.544552 kernel: audit: type=1104 audit(1752535125.524:1592): pid=5667 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:45.517000 audit[5667]: USER_END pid=5667 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:45.524000 audit[5667]: CRED_DISP pid=5667 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:45.556355 systemd[1]: sshd@11-139.178.70.103:22-139.178.89.65:33588.service: Deactivated successfully. Jul 14 23:18:45.580170 kernel: audit: type=1131 audit(1752535125.563:1593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.103:22-139.178.89.65:33588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:45.563000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.103:22-139.178.89.65:33588 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:45.568469 systemd[1]: session-14.scope: Deactivated successfully. Jul 14 23:18:45.568581 systemd[1]: session-14.scope: Consumed 7.418s CPU time. Jul 14 23:18:45.571899 systemd-logind[1242]: Session 14 logged out. Waiting for processes to exit. Jul 14 23:18:45.594264 systemd-logind[1242]: Removed session 14. Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:45.341 [WARNING][5878] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0", GenerateName:"calico-kube-controllers-ff54b7cbb-", Namespace:"calico-system", SelfLink:"", UID:"a344ebf2-1f08-4992-af9c-40b717e107d2", ResourceVersion:"1358", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"ff54b7cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea", Pod:"calico-kube-controllers-ff54b7cbb-m45xx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliefe5b2c4116", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:45.365 [INFO][5878] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:45.366 [INFO][5878] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" iface="eth0" netns="" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:45.366 [INFO][5878] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:45.366 [INFO][5878] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.164 [INFO][5885] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.189 [INFO][5885] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.190 [INFO][5885] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.365 [WARNING][5885] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.366 [INFO][5885] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.383 [INFO][5885] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:18:46.489598 env[1250]: 2025-07-14 23:18:46.419 [INFO][5878] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:18:46.489598 env[1250]: time="2025-07-14T23:18:46.490322933Z" level=info msg="TearDown network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" successfully" Jul 14 23:18:46.489598 env[1250]: time="2025-07-14T23:18:46.490343996Z" level=info msg="StopPodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" returns successfully" Jul 14 23:18:47.788529 kubelet[2104]: E0714 23:18:47.788492 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 5m1.846305876s ago; threshold is 3m0s" Jul 14 23:18:50.528343 systemd[1]: Started sshd@12-139.178.70.103:22-139.178.89.65:49180.service. Jul 14 23:18:50.683569 kernel: audit: type=1130 audit(1752535130.531:1594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.103:22-139.178.89.65:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:50.531000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.103:22-139.178.89.65:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:18:51.399000 audit[5936]: USER_ACCT pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.458920 kernel: audit: type=1101 audit(1752535131.399:1595): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.464470 kernel: audit: type=1103 audit(1752535131.406:1596): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.467806 kernel: audit: type=1006 audit(1752535131.406:1597): pid=5936 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 14 23:18:51.467868 kernel: audit: type=1300 audit(1752535131.406:1597): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5853cce0 a2=3 a3=0 items=0 ppid=1 pid=5936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:51.467918 kernel: audit: type=1327 audit(1752535131.406:1597): proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:51.406000 audit[5936]: CRED_ACQ pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.406000 audit[5936]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5853cce0 a2=3 a3=0 items=0 ppid=1 pid=5936 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:18:51.406000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:18:51.535870 sshd[5936]: Accepted publickey for core from 139.178.89.65 port 49180 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:18:51.424049 sshd[5936]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:18:51.679281 systemd-logind[1242]: New session 15 of user core. Jul 14 23:18:51.693151 kernel: audit: type=1105 audit(1752535131.686:1598): pid=5936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.696831 kernel: audit: type=1103 audit(1752535131.691:1599): pid=5939 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.686000 audit[5936]: USER_START pid=5936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.691000 audit[5939]: CRED_ACQ pid=5939 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:18:51.682877 systemd[1]: Started session-15.scope. Jul 14 23:18:53.649000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:18:53.803877 kernel: audit: type=1400 audit(1752535133.649:1600): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:18:53.831512 kernel: audit: type=1300 audit(1752535133.649:1600): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050b80 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:18:53.649000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050b80 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:18:53.649000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:18:53.654000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:18:53.654000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013245e0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:18:53.654000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:18:55.381000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:55.381000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002892bd0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:18:55.381000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:55.398000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:55.398000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001c27500 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:18:55.398000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:56.248660 kubelet[2104]: W0714 23:18:47.939944 2104 logging.go:55] [core] [Channel #24 SubChannel #25]grpc: addrConn.createTransport failed to connect to {Addr: "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock", ServerName: "%2Fvar%2Flib%2Fkubelet%2Fplugins_registry%2Fcsi.tigera.io-reg.sock", }. Err: connection error: desc = "error reading server preface: read unix @->/registration/csi.tigera.io-reg.sock: use of closed network connection" Jul 14 23:18:56.744000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.759450 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 14 23:18:56.795871 kernel: audit: type=1400 audit(1752535136.744:1604): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.816835 kernel: audit: type=1300 audit(1752535136.744:1604): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c009b04690 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.830293 kernel: audit: type=1327 audit(1752535136.744:1604): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.830341 kernel: audit: type=1400 audit(1752535136.744:1605): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.830365 kernel: audit: type=1300 audit(1752535136.744:1605): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c009b046f0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.830391 kernel: audit: type=1327 audit(1752535136.744:1605): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.830424 kernel: audit: type=1400 audit(1752535136.748:1606): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.833603 kernel: audit: type=1300 audit(1752535136.748:1606): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00f2dc300 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.833639 kernel: audit: type=1327 audit(1752535136.748:1606): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.833665 kernel: audit: type=1400 audit(1752535136.824:1607): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.744000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c009b04690 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.744000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.744000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.744000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c009b046f0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.744000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.748000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.748000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00f2dc300 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.748000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.824000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.824000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00f2dc420 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.824000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.824000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.824000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c007d2caa0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.824000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:56.871000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:56.871000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0045639e0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:18:56.871000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:18:58.913000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:58.913000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001c27840 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:18:58.913000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:58.926000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:58.926000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c001c27860 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:18:58.926000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:58.930000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:58.930000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001ab7ac0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:18:58.930000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:18:58.971000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:18:58.971000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001ab7de0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:18:58.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:01.047887 kubelet[2104]: E0714 23:19:01.044111 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 5m19.123018599s ago; threshold is 3m0s" Jul 14 23:19:01.366131 kubelet[2104]: I0714 23:18:47.683482 2104 setters.go:600] "Node became not ready" node="localhost" condition={"type":"Ready","status":"False","lastHeartbeatTime":"2025-07-14T23:18:47Z","lastTransitionTime":"2025-07-14T23:18:47Z","reason":"KubeletNotReady","message":"PLEG is not healthy: pleg was last seen active 5m7.237346639s ago; threshold is 3m0s"} Jul 14 23:19:01.473561 kubelet[2104]: E0714 23:19:01.473522 2104 controller.go:195] "Failed to update lease" err="Operation cannot be fulfilled on leases.coordination.k8s.io \"localhost\": the object has been modified; please apply your changes to the latest version and try again" Jul 14 23:19:01.482433 kubelet[2104]: E0714 23:19:01.482395 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:18:55.478316988 +0000 UTC m=+417.692840092 (durationBeforeRetry 8s). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:19:01.506179 env[1250]: time="2025-07-14T23:19:01.505720927Z" level=info msg="RemovePodSandbox for \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\"" Jul 14 23:19:01.506179 env[1250]: time="2025-07-14T23:19:01.505753558Z" level=info msg="Forcibly stopping sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\"" Jul 14 23:19:06.680851 env[1250]: time="2025-07-14T23:19:06.658720849Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:19:06.680851 env[1250]: time="2025-07-14T23:19:06.711405736Z" level=error msg="ExecSync for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" failed" error="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:08.369 [WARNING][6042] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0", GenerateName:"calico-kube-controllers-ff54b7cbb-", Namespace:"calico-system", SelfLink:"", UID:"a344ebf2-1f08-4992-af9c-40b717e107d2", ResourceVersion:"1358", Generation:0, CreationTimestamp:time.Date(2025, time.July, 14, 23, 12, 15, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"ff54b7cbb", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea", Pod:"calico-kube-controllers-ff54b7cbb-m45xx", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"caliefe5b2c4116", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:08.424 [INFO][6042] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:08.429 [INFO][6042] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" iface="eth0" netns="" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:08.430 [INFO][6042] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:08.431 [INFO][6042] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:11.500 [INFO][6071] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:11.523 [INFO][6071] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:11.531 [INFO][6071] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:11.937 [WARNING][6071] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:11.954 [INFO][6071] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" HandleID="k8s-pod-network.2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:11.963 [INFO][6071] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:19:12.130942 env[1250]: 2025-07-14 23:19:12.012 [INFO][6042] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2" Jul 14 23:19:12.130942 env[1250]: time="2025-07-14T23:19:12.091409960Z" level=info msg="TearDown network for sandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" successfully" Jul 14 23:19:12.619169 env[1250]: time="2025-07-14T23:19:12.320591159Z" level=info msg="RemovePodSandbox \"2a96ffd8bce053df8650dd8e0ae3600e77211ef4be50018adee06eb73275dca2\" returns successfully" Jul 14 23:19:30.124706 kubelet[2104]: E0714 23:19:29.319066 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-live"] Jul 14 23:19:43.911946 kubelet[2104]: E0714 23:19:43.896283 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 5m42.840007749s ago; threshold is 3m0s" Jul 14 23:19:44.885590 kubelet[2104]: E0714 23:19:29.873248 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = DeadlineExceeded desc = failed to exec in container: timeout 5s exceeded: context deadline exceeded" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" cmd=["/health","-ready"] Jul 14 23:19:46.329000 audit[6084]: NETFILTER_CFG table=filter:127 family=2 entries=21 op=nft_register_rule pid=6084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:46.462713 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:19:46.474805 kernel: audit: type=1325 audit(1752535186.329:1614): table=filter:127 family=2 entries=21 op=nft_register_rule pid=6084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:46.478306 kernel: audit: type=1300 audit(1752535186.329:1614): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffea6517450 a2=0 a3=7ffea651743c items=0 ppid=2207 pid=6084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:46.478378 kernel: audit: type=1327 audit(1752535186.329:1614): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:46.478402 kernel: audit: type=1325 audit(1752535186.340:1615): table=nat:128 family=2 entries=19 op=nft_register_chain pid=6084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:46.478434 kernel: audit: type=1300 audit(1752535186.340:1615): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffea6517450 a2=0 a3=7ffea651743c items=0 ppid=2207 pid=6084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:46.478458 kernel: audit: type=1327 audit(1752535186.340:1615): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:46.329000 audit[6084]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffea6517450 a2=0 a3=7ffea651743c items=0 ppid=2207 pid=6084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:46.329000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:46.340000 audit[6084]: NETFILTER_CFG table=nat:128 family=2 entries=19 op=nft_register_chain pid=6084 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:19:46.340000 audit[6084]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffea6517450 a2=0 a3=7ffea651743c items=0 ppid=2207 pid=6084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:46.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:19:46.615463 sshd[5936]: pam_unix(sshd:session): session closed for user core Jul 14 23:19:46.757000 audit[5936]: USER_END pid=5936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:46.795328 kernel: audit: type=1106 audit(1752535186.757:1616): pid=5936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:46.798331 kernel: audit: type=1104 audit(1752535186.765:1617): pid=5936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:46.798402 kernel: audit: type=1131 audit(1752535186.789:1618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.103:22-139.178.89.65:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:46.765000 audit[5936]: CRED_DISP pid=5936 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:46.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.103:22-139.178.89.65:49180 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:46.788597 systemd[1]: sshd@12-139.178.70.103:22-139.178.89.65:49180.service: Deactivated successfully. Jul 14 23:19:46.794469 systemd[1]: session-15.scope: Deactivated successfully. Jul 14 23:19:46.794579 systemd[1]: session-15.scope: Consumed 3.668s CPU time. Jul 14 23:19:46.796154 systemd-logind[1242]: Session 15 logged out. Waiting for processes to exit. Jul 14 23:19:46.812259 systemd-logind[1242]: Removed session 15. Jul 14 23:19:50.031164 kubelet[2104]: E0714 23:19:50.020823 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:20:02.853014573 +0000 UTC m=+485.067537676 (durationBeforeRetry 16s). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:19:50.592303 kubelet[2104]: E0714 23:19:50.369653 2104 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 6m9.010459625s ago; threshold is 3m0s]" Jul 14 23:19:51.532586 kubelet[2104]: W0714 23:19:51.079728 2104 logging.go:55] [core] [Channel #27 SubChannel #28]grpc: addrConn.createTransport failed to connect to {Addr: "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock", ServerName: "%2Fvar%2Flib%2Fkubelet%2Fplugins_registry%2Fcsi.tigera.io-reg.sock", }. Err: connection error: desc = "transport: failed to write client preface: write unix @->/registration/csi.tigera.io-reg.sock: use of closed network connection" Jul 14 23:19:51.762681 systemd[1]: Started sshd@13-139.178.70.103:22-139.178.89.65:33018.service. Jul 14 23:19:51.804568 kernel: audit: type=1130 audit(1752535191.766:1619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.103:22-139.178.89.65:33018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:51.766000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.103:22-139.178.89.65:33018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:19:52.067218 sshd[6170]: Accepted publickey for core from 139.178.89.65 port 33018 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:19:52.084291 kernel: audit: type=1101 audit(1752535192.065:1620): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.084351 kernel: audit: type=1103 audit(1752535192.070:1621): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.086775 kernel: audit: type=1006 audit(1752535192.070:1622): pid=6170 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=16 res=1 Jul 14 23:19:52.089953 kernel: audit: type=1300 audit(1752535192.070:1622): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26972bf0 a2=3 a3=0 items=0 ppid=1 pid=6170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:52.089988 kernel: audit: type=1327 audit(1752535192.070:1622): proctitle=737368643A20636F7265205B707269765D Jul 14 23:19:52.065000 audit[6170]: USER_ACCT pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.070000 audit[6170]: CRED_ACQ pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.070000 audit[6170]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26972bf0 a2=3 a3=0 items=0 ppid=1 pid=6170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:19:52.070000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:19:52.084871 sshd[6170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:19:52.173362 systemd-logind[1242]: New session 16 of user core. Jul 14 23:19:52.176018 systemd[1]: Started session-16.scope. Jul 14 23:19:52.195934 kernel: audit: type=1105 audit(1752535192.184:1623): pid=6170 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.196009 kernel: audit: type=1103 audit(1752535192.185:1624): pid=6172 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.184000 audit[6170]: USER_START pid=6170 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:52.185000 audit[6172]: CRED_ACQ pid=6172 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:19:53.713000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:19:53.832594 kernel: audit: type=1400 audit(1752535193.713:1625): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:19:53.838479 kernel: audit: type=1300 audit(1752535193.713:1625): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050980 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:19:53.713000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050980 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:19:53.713000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:19:53.730000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:19:53.730000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000f34200 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:19:53.730000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:19:55.506000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:55.506000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000fd49f0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:19:55.506000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:55.515000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:55.515000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000bd1920 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:19:55.515000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:56.847000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.989170 kernel: kauditd_printk_skb: 10 callbacks suppressed Jul 14 23:19:57.025982 kernel: audit: type=1400 audit(1752535196.847:1629): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:57.034161 kernel: audit: type=1300 audit(1752535196.847:1629): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00df828d0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:57.034264 kernel: audit: type=1327 audit(1752535196.847:1629): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:57.043316 kernel: audit: type=1400 audit(1752535196.851:1630): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:57.051278 kernel: audit: type=1300 audit(1752535196.851:1630): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0052ab3b0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:57.051338 kernel: audit: type=1327 audit(1752535196.851:1630): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:57.051362 kernel: audit: type=1400 audit(1752535196.882:1631): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:57.051380 kernel: audit: type=1300 audit(1752535196.882:1631): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00ed38340 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:57.051400 kernel: audit: type=1327 audit(1752535196.882:1631): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:57.051432 kernel: audit: type=1400 audit(1752535196.885:1632): avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.847000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00df828d0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:56.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.851000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.851000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0052ab3b0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:56.851000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.882000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.882000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00ed38340 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:56.882000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.885000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.885000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c0052ab5f0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:56.885000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.885000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.885000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c00df829c0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:56.885000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:56.899000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:56.899000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00e818a00 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:19:56.899000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:19:59.214000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:59.214000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000e91dc0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:19:59.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:59.245000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:59.245000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000e91de0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:19:59.245000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:59.351000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:59.351000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c000a40c40 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:19:59.351000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:19:59.387000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:19:59.387000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000a40c60 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:19:59.387000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:08.196000 audit[6185]: NETFILTER_CFG table=filter:129 family=2 entries=20 op=nft_register_rule pid=6185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.653906 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 14 23:20:08.679196 kernel: audit: type=1325 audit(1752535208.196:1639): table=filter:129 family=2 entries=20 op=nft_register_rule pid=6185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.683817 kernel: audit: type=1300 audit(1752535208.196:1639): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff513ef050 a2=0 a3=7fff513ef03c items=0 ppid=2207 pid=6185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.683907 kernel: audit: type=1327 audit(1752535208.196:1639): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:08.683929 kernel: audit: type=1325 audit(1752535208.216:1640): table=nat:130 family=2 entries=22 op=nft_register_rule pid=6185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.683947 kernel: audit: type=1300 audit(1752535208.216:1640): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff513ef050 a2=0 a3=7fff513ef03c items=0 ppid=2207 pid=6185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.683968 kernel: audit: type=1327 audit(1752535208.216:1640): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:08.683998 kernel: audit: type=1325 audit(1752535208.240:1641): table=filter:131 family=2 entries=20 op=nft_register_rule pid=6187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.686187 kernel: audit: type=1300 audit(1752535208.240:1641): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffff4badaa0 a2=0 a3=7ffff4bada8c items=0 ppid=2207 pid=6187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.686349 kernel: audit: type=1327 audit(1752535208.240:1641): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:08.688879 kernel: audit: type=1325 audit(1752535208.275:1642): table=nat:132 family=2 entries=14 op=nft_register_rule pid=6187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.196000 audit[6185]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7fff513ef050 a2=0 a3=7fff513ef03c items=0 ppid=2207 pid=6185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.196000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:08.216000 audit[6185]: NETFILTER_CFG table=nat:130 family=2 entries=22 op=nft_register_rule pid=6185 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.216000 audit[6185]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7fff513ef050 a2=0 a3=7fff513ef03c items=0 ppid=2207 pid=6185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.216000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:08.240000 audit[6187]: NETFILTER_CFG table=filter:131 family=2 entries=20 op=nft_register_rule pid=6187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.240000 audit[6187]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffff4badaa0 a2=0 a3=7ffff4bada8c items=0 ppid=2207 pid=6187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.240000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:08.275000 audit[6187]: NETFILTER_CFG table=nat:132 family=2 entries=14 op=nft_register_rule pid=6187 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:08.275000 audit[6187]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffff4badaa0 a2=0 a3=0 items=0 ppid=2207 pid=6187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:08.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:15.608046 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:20:15.750129 kernel: audit: type=1325 audit(1752535215.589:1643): table=filter:133 family=2 entries=20 op=nft_register_rule pid=6190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:15.769062 kernel: audit: type=1300 audit(1752535215.589:1643): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc35adb740 a2=0 a3=7ffc35adb72c items=0 ppid=2207 pid=6190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:15.780871 kernel: audit: type=1327 audit(1752535215.589:1643): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:15.780918 kernel: audit: type=1325 audit(1752535215.600:1644): table=nat:134 family=2 entries=22 op=nft_register_rule pid=6190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:15.787473 kernel: audit: type=1300 audit(1752535215.600:1644): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc35adb740 a2=0 a3=7ffc35adb72c items=0 ppid=2207 pid=6190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:15.787502 kernel: audit: type=1327 audit(1752535215.600:1644): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:15.589000 audit[6190]: NETFILTER_CFG table=filter:133 family=2 entries=20 op=nft_register_rule pid=6190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:15.589000 audit[6190]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc35adb740 a2=0 a3=7ffc35adb72c items=0 ppid=2207 pid=6190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:15.589000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:15.600000 audit[6190]: NETFILTER_CFG table=nat:134 family=2 entries=22 op=nft_register_rule pid=6190 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:15.600000 audit[6190]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc35adb740 a2=0 a3=7ffc35adb72c items=0 ppid=2207 pid=6190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:15.600000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.580000 audit[6192]: NETFILTER_CFG table=filter:135 family=2 entries=17 op=nft_register_rule pid=6192 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.674293 kernel: audit: type=1325 audit(1752535222.580:1645): table=filter:135 family=2 entries=17 op=nft_register_rule pid=6192 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.682041 kernel: audit: type=1300 audit(1752535222.580:1645): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc12d0a1f0 a2=0 a3=7ffc12d0a1dc items=0 ppid=2207 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.682953 kernel: audit: type=1327 audit(1752535222.580:1645): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.683991 kernel: audit: type=1325 audit(1752535222.604:1646): table=nat:136 family=2 entries=47 op=nft_register_chain pid=6192 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.685763 kernel: audit: type=1300 audit(1752535222.604:1646): arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc12d0a1f0 a2=0 a3=7ffc12d0a1dc items=0 ppid=2207 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.687136 kernel: audit: type=1327 audit(1752535222.604:1646): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.687183 kernel: audit: type=1325 audit(1752535222.655:1647): table=filter:137 family=2 entries=14 op=nft_register_rule pid=6195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.687207 kernel: audit: type=1300 audit(1752535222.655:1647): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffe60bb140 a2=0 a3=7fffe60bb12c items=0 ppid=2207 pid=6195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.687227 kernel: audit: type=1327 audit(1752535222.655:1647): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.687247 kernel: audit: type=1325 audit(1752535222.665:1648): table=nat:138 family=2 entries=20 op=nft_register_rule pid=6195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.580000 audit[6192]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffc12d0a1f0 a2=0 a3=7ffc12d0a1dc items=0 ppid=2207 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.580000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.604000 audit[6192]: NETFILTER_CFG table=nat:136 family=2 entries=47 op=nft_register_chain pid=6192 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.604000 audit[6192]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffc12d0a1f0 a2=0 a3=7ffc12d0a1dc items=0 ppid=2207 pid=6192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.604000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.655000 audit[6195]: NETFILTER_CFG table=filter:137 family=2 entries=14 op=nft_register_rule pid=6195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.655000 audit[6195]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffe60bb140 a2=0 a3=7fffe60bb12c items=0 ppid=2207 pid=6195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.655000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:22.665000 audit[6195]: NETFILTER_CFG table=nat:138 family=2 entries=20 op=nft_register_rule pid=6195 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:22.665000 audit[6195]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffe60bb140 a2=0 a3=7fffe60bb12c items=0 ppid=2207 pid=6195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:22.665000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:27.821000 audit[6200]: NETFILTER_CFG table=filter:139 family=2 entries=14 op=nft_register_rule pid=6200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:27.956861 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 14 23:20:27.968906 kernel: audit: type=1325 audit(1752535227.821:1649): table=filter:139 family=2 entries=14 op=nft_register_rule pid=6200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:27.976880 kernel: audit: type=1300 audit(1752535227.821:1649): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffca923180 a2=0 a3=7fffca92316c items=0 ppid=2207 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:27.976927 kernel: audit: type=1327 audit(1752535227.821:1649): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:27.980666 kernel: audit: type=1325 audit(1752535227.832:1650): table=nat:140 family=2 entries=20 op=nft_register_rule pid=6200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:27.980696 kernel: audit: type=1300 audit(1752535227.832:1650): arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffca923180 a2=0 a3=7fffca92316c items=0 ppid=2207 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:27.980716 kernel: audit: type=1327 audit(1752535227.832:1650): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:27.821000 audit[6200]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fffca923180 a2=0 a3=7fffca92316c items=0 ppid=2207 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:27.821000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:27.832000 audit[6200]: NETFILTER_CFG table=nat:140 family=2 entries=20 op=nft_register_rule pid=6200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:27.832000 audit[6200]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fffca923180 a2=0 a3=7fffca92316c items=0 ppid=2207 pid=6200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:27.832000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:29.142000 audit[6202]: NETFILTER_CFG table=filter:141 family=2 entries=13 op=nft_register_rule pid=6202 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:29.260645 kernel: audit: type=1325 audit(1752535229.142:1651): table=filter:141 family=2 entries=13 op=nft_register_rule pid=6202 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:29.274966 kernel: audit: type=1300 audit(1752535229.142:1651): arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc8c8bdc60 a2=0 a3=7ffc8c8bdc4c items=0 ppid=2207 pid=6202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:29.278395 kernel: audit: type=1327 audit(1752535229.142:1651): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:29.280233 kernel: audit: type=1325 audit(1752535229.155:1652): table=nat:142 family=2 entries=31 op=nft_register_chain pid=6202 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:29.142000 audit[6202]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffc8c8bdc60 a2=0 a3=7ffc8c8bdc4c items=0 ppid=2207 pid=6202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:29.142000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:29.155000 audit[6202]: NETFILTER_CFG table=nat:142 family=2 entries=31 op=nft_register_chain pid=6202 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:29.155000 audit[6202]: SYSCALL arch=c000003e syscall=46 success=yes exit=11236 a0=3 a1=7ffc8c8bdc60 a2=0 a3=7ffc8c8bdc4c items=0 ppid=2207 pid=6202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:29.155000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:31.715000 audit[6204]: NETFILTER_CFG table=filter:143 family=2 entries=11 op=nft_register_rule pid=6204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:31.715000 audit[6204]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff65a18710 a2=0 a3=7fff65a186fc items=0 ppid=2207 pid=6204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:31.715000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:31.720000 audit[6204]: NETFILTER_CFG table=nat:144 family=2 entries=29 op=nft_register_chain pid=6204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:31.720000 audit[6204]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff65a18710 a2=0 a3=7fff65a186fc items=0 ppid=2207 pid=6204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:31.720000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:37.762833 kubelet[2104]: E0714 23:20:37.757091 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 6m18.046422756s ago; threshold is 3m0s" Jul 14 23:20:40.025137 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 14 23:20:40.115805 kernel: audit: type=1325 audit(1752535240.012:1655): table=filter:145 family=2 entries=10 op=nft_register_rule pid=6229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:40.132505 kernel: audit: type=1300 audit(1752535240.012:1655): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe2dcab290 a2=0 a3=7ffe2dcab27c items=0 ppid=2207 pid=6229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:40.134545 kernel: audit: type=1327 audit(1752535240.012:1655): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:40.134599 kernel: audit: type=1325 audit(1752535240.024:1656): table=nat:146 family=2 entries=34 op=nft_register_chain pid=6229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:40.134701 kernel: audit: type=1300 audit(1752535240.024:1656): arch=c000003e syscall=46 success=yes exit=10244 a0=3 a1=7ffe2dcab290 a2=0 a3=7ffe2dcab27c items=0 ppid=2207 pid=6229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:40.136902 kernel: audit: type=1327 audit(1752535240.024:1656): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:40.012000 audit[6229]: NETFILTER_CFG table=filter:145 family=2 entries=10 op=nft_register_rule pid=6229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:40.012000 audit[6229]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe2dcab290 a2=0 a3=7ffe2dcab27c items=0 ppid=2207 pid=6229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:40.012000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:40.024000 audit[6229]: NETFILTER_CFG table=nat:146 family=2 entries=34 op=nft_register_chain pid=6229 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:20:40.024000 audit[6229]: SYSCALL arch=c000003e syscall=46 success=yes exit=10244 a0=3 a1=7ffe2dcab290 a2=0 a3=7ffe2dcab27c items=0 ppid=2207 pid=6229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:40.024000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:20:49.824906 sshd[6170]: pam_unix(sshd:session): session closed for user core Jul 14 23:20:49.932131 kernel: audit: type=1106 audit(1752535249.869:1657): pid=6170 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:49.935728 kernel: audit: type=1104 audit(1752535249.874:1658): pid=6170 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:49.935774 kernel: audit: type=1131 audit(1752535249.890:1659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.103:22-139.178.89.65:33018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:49.869000 audit[6170]: USER_END pid=6170 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:49.874000 audit[6170]: CRED_DISP pid=6170 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:49.890000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.103:22-139.178.89.65:33018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:49.888642 systemd[1]: sshd@13-139.178.70.103:22-139.178.89.65:33018.service: Deactivated successfully. Jul 14 23:20:49.897694 systemd[1]: session-16.scope: Deactivated successfully. Jul 14 23:20:49.897875 systemd[1]: session-16.scope: Consumed 5.180s CPU time. Jul 14 23:20:49.900531 systemd-logind[1242]: Session 16 logged out. Waiting for processes to exit. Jul 14 23:20:49.911903 systemd-logind[1242]: Removed session 16. Jul 14 23:20:50.699649 kubelet[2104]: E0714 23:20:50.330472 2104 configmap.go:193] Couldn't get configMap calico-system/goldmane-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 14 23:20:50.743795 kubelet[2104]: E0714 23:20:50.443250 2104 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime is down, PLEG is not healthy: pleg was last seen active 7m3.598306706s ago; threshold is 3m0s]" Jul 14 23:20:51.448021 kubelet[2104]: E0714 23:20:51.440663 2104 configmap.go:193] Couldn't get configMap calico-system/goldmane: failed to sync configmap cache: timed out waiting for the condition Jul 14 23:20:51.543765 kubelet[2104]: E0714 23:20:51.454304 2104 secret.go:189] Couldn't get secret calico-system/goldmane-key-pair: failed to sync secret cache: timed out waiting for the condition Jul 14 23:20:53.845000 audit[4198]: AVC avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:20:54.027074 kernel: audit: type=1400 audit(1752535253.845:1660): avc: denied { watch } for pid=4198 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.134299370/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c780,c997 tclass=file permissive=0 Jul 14 23:20:54.044696 kernel: audit: type=1300 audit(1752535253.845:1660): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050a40 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:20:54.044761 kernel: audit: type=1327 audit(1752535253.845:1660): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:54.044781 kernel: audit: type=1400 audit(1752535253.851:1661): avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:20:54.044800 kernel: audit: type=1300 audit(1752535253.851:1661): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ba12c0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:20:54.044819 kernel: audit: type=1327 audit(1752535253.851:1661): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:53.845000 audit[4198]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001050a40 a2=fc6 a3=0 items=0 ppid=3719 pid=4198 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c780,c997 key=(null) Jul 14 23:20:53.845000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:53.851000 audit[4156]: AVC avc: denied { watch } for pid=4156 comm="apiserver" path="/calico-apiserver-certs/..2025_07_14_23_12_30.3126710118/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c741,c911 tclass=file permissive=0 Jul 14 23:20:53.851000 audit[4156]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ba12c0 a2=fc6 a3=0 items=0 ppid=3344 pid=4156 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c741,c911 key=(null) Jul 14 23:20:53.851000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 14 23:20:54.886400 systemd[1]: Started sshd@14-139.178.70.103:22-139.178.89.65:40206.service. Jul 14 23:20:54.957382 kernel: audit: type=1130 audit(1752535254.890:1662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.103:22-139.178.89.65:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:54.890000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.103:22-139.178.89.65:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:20:55.182000 audit[6294]: USER_ACCT pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.209781 kernel: audit: type=1101 audit(1752535255.182:1663): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.213268 kernel: audit: type=1103 audit(1752535255.190:1664): pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.216231 kernel: audit: type=1006 audit(1752535255.190:1665): pid=6294 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 14 23:20:55.216276 kernel: audit: type=1300 audit(1752535255.190:1665): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9b0b11f0 a2=3 a3=0 items=0 ppid=1 pid=6294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:55.216308 kernel: audit: type=1327 audit(1752535255.190:1665): proctitle=737368643A20636F7265205B707269765D Jul 14 23:20:55.190000 audit[6294]: CRED_ACQ pid=6294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.190000 audit[6294]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc9b0b11f0 a2=3 a3=0 items=0 ppid=1 pid=6294 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:20:55.190000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:20:55.261807 sshd[6294]: Accepted publickey for core from 139.178.89.65 port 40206 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:20:55.201497 sshd[6294]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:20:55.302843 systemd-logind[1242]: New session 17 of user core. Jul 14 23:20:55.322928 kernel: audit: type=1105 audit(1752535255.308:1666): pid=6294 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.323046 kernel: audit: type=1103 audit(1752535255.313:1667): pid=6296 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.308000 audit[6294]: USER_START pid=6294 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.313000 audit[6296]: CRED_ACQ pid=6296 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:20:55.305928 systemd[1]: Started session-17.scope. Jul 14 23:20:55.659000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:55.713563 kernel: audit: type=1400 audit(1752535255.659:1668): avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:55.719377 kernel: audit: type=1300 audit(1752535255.659:1668): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010fe9f0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:55.659000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0010fe9f0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:55.659000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:55.676000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:55.676000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002322ee0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:55.676000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:56.519347 kubelet[2104]: E0714 23:20:54.776174 2104 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-ca-bundle podName:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee nodeName:}" failed. No retries permitted until 2025-07-14 23:20:51.211270253 +0000 UTC m=+533.425793369 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "goldmane-ca-bundle" (UniqueName: "kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-ca-bundle") pod "goldmane-58fd7646b9-mng8c" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee") : failed to sync configmap cache: timed out waiting for the condition Jul 14 23:20:56.894000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.894000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c00eead760 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:20:56.894000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:56.920000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.920000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c010ab1e90 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:20:56.920000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:56.928000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.928000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c005e13800 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:20:56.928000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:56.928000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.928000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c003756930 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:20:56.928000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:56.928000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.928000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c003757620 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:20:56.928000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:56.929000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:56.929000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c010ab1ec0 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:20:56.929000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:20:59.627000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:59.627000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002323180 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:59.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:59.627000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:59.627000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00204d6a0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:59.627000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:59.634000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:59.634000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0023231c0 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:59.634000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:20:59.634000 audit[1978]: AVC avc: denied { watch } for pid=1978 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:20:59.634000 audit[1978]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002323200 a2=fc6 a3=0 items=0 ppid=1798 pid=1978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:20:59.634000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:21:03.616243 kubelet[2104]: E0714 23:21:00.814253 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 7m16.561827164s ago; threshold is 3m0s" Jul 14 23:21:04.474659 kubelet[2104]: E0714 23:21:04.467659 2104 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-config podName:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee nodeName:}" failed. No retries permitted until 2025-07-14 23:20:57.56737315 +0000 UTC m=+539.781896253 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "config" (UniqueName: "kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-config") pod "goldmane-58fd7646b9-mng8c" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee") : failed to sync configmap cache: timed out waiting for the condition Jul 14 23:21:19.653738 sshd[6294]: pam_unix(sshd:session): session closed for user core Jul 14 23:21:19.808171 kernel: kauditd_printk_skb: 34 callbacks suppressed Jul 14 23:21:19.816152 kernel: audit: type=1106 audit(1752535279.702:1680): pid=6294 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:19.819705 kernel: audit: type=1104 audit(1752535279.711:1681): pid=6294 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:19.819764 kernel: audit: type=1131 audit(1752535279.777:1682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.103:22-139.178.89.65:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:19.702000 audit[6294]: USER_END pid=6294 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:19.711000 audit[6294]: CRED_DISP pid=6294 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:19.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.103:22-139.178.89.65:40206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:19.769101 systemd[1]: sshd@14-139.178.70.103:22-139.178.89.65:40206.service: Deactivated successfully. Jul 14 23:21:19.779232 systemd[1]: session-17.scope: Deactivated successfully. Jul 14 23:21:19.779320 systemd[1]: session-17.scope: Consumed 4.990s CPU time. Jul 14 23:21:19.790575 systemd-logind[1242]: Session 17 logged out. Waiting for processes to exit. Jul 14 23:21:19.801097 systemd-logind[1242]: Removed session 17. Jul 14 23:21:20.300234 kubelet[2104]: E0714 23:21:20.285153 2104 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-key-pair podName:1a21ac09-ca35-4722-b2a3-bce6c2fba7ee nodeName:}" failed. No retries permitted until 2025-07-14 23:21:04.974782617 +0000 UTC m=+547.189305719 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "goldmane-key-pair" (UniqueName: "kubernetes.io/secret/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-key-pair") pod "goldmane-58fd7646b9-mng8c" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee") : failed to sync secret cache: timed out waiting for the condition Jul 14 23:21:22.788103 kubelet[2104]: E0714 23:21:22.764889 2104 kubelet.go:2345] "Skipping pod synchronization" err="PLEG is not healthy: pleg was last seen active 7m36.902936119s ago; threshold is 3m0s" Jul 14 23:21:23.365366 kubelet[2104]: E0714 23:21:21.794397 2104 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-14 23:21:52.25758073 +0000 UTC m=+594.472103835 (durationBeforeRetry 32s). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 14 23:21:24.742584 systemd[1]: Started sshd@15-139.178.70.103:22-139.178.89.65:60868.service. Jul 14 23:21:24.899839 kernel: audit: type=1130 audit(1752535284.754:1683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.103:22-139.178.89.65:60868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:24.754000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.103:22-139.178.89.65:60868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:25.280588 sshd[6419]: Accepted publickey for core from 139.178.89.65 port 60868 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:21:25.297481 kernel: audit: type=1101 audit(1752535285.279:1684): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.299223 kernel: audit: type=1103 audit(1752535285.284:1685): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.299272 kernel: audit: type=1006 audit(1752535285.284:1686): pid=6419 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 14 23:21:25.299293 kernel: audit: type=1300 audit(1752535285.284:1686): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefdd5e4e0 a2=3 a3=0 items=0 ppid=1 pid=6419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:25.300966 kernel: audit: type=1327 audit(1752535285.284:1686): proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:25.279000 audit[6419]: USER_ACCT pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.284000 audit[6419]: CRED_ACQ pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.284000 audit[6419]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffefdd5e4e0 a2=3 a3=0 items=0 ppid=1 pid=6419 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:25.284000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:25.300874 sshd[6419]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:21:25.572186 systemd-logind[1242]: New session 18 of user core. Jul 14 23:21:25.622233 kernel: audit: type=1105 audit(1752535285.592:1687): pid=6419 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.622340 kernel: audit: type=1103 audit(1752535285.597:1688): pid=6421 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.592000 audit[6419]: USER_START pid=6419 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.597000 audit[6421]: CRED_ACQ pid=6421 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:25.578985 systemd[1]: Started session-18.scope. Jul 14 23:21:29.456037 update_engine[1244]: I0714 23:21:29.447371 1244 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 14 23:21:29.456037 update_engine[1244]: I0714 23:21:29.449748 1244 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.460395 1244 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.464730 1244 omaha_request_params.cc:62] Current group set to lts Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.493065 1244 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.493080 1244 update_attempter.cc:643] Scheduling an action processor start. Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.494916 1244 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.499469 1244 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.504812 1244 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.504819 1244 omaha_request_action.cc:271] Request: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: Jul 14 23:21:29.557181 update_engine[1244]: I0714 23:21:29.504823 1244 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:21:29.604335 update_engine[1244]: I0714 23:21:29.604306 1244 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:21:29.606241 locksmithd[1292]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 14 23:21:29.607878 update_engine[1244]: E0714 23:21:29.606922 1244 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:21:29.607878 update_engine[1244]: I0714 23:21:29.606984 1244 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 14 23:21:34.397360 sshd[6419]: pam_unix(sshd:session): session closed for user core Jul 14 23:21:34.487516 kernel: audit: type=1106 audit(1752535294.440:1689): pid=6419 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:34.492104 kernel: audit: type=1104 audit(1752535294.444:1690): pid=6419 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:34.492165 kernel: audit: type=1131 audit(1752535294.465:1691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.103:22-139.178.89.65:60868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:34.440000 audit[6419]: USER_END pid=6419 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:34.444000 audit[6419]: CRED_DISP pid=6419 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:34.465000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.103:22-139.178.89.65:60868 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:34.463178 systemd[1]: sshd@15-139.178.70.103:22-139.178.89.65:60868.service: Deactivated successfully. Jul 14 23:21:34.467004 systemd[1]: session-18.scope: Deactivated successfully. Jul 14 23:21:34.467105 systemd[1]: session-18.scope: Consumed 2.027s CPU time. Jul 14 23:21:34.471125 systemd-logind[1242]: Session 18 logged out. Waiting for processes to exit. Jul 14 23:21:34.487370 systemd-logind[1242]: Removed session 18. Jul 14 23:21:34.938230 kubelet[2104]: E0714 23:21:34.691449 2104 secret.go:189] Couldn't get secret calico-system/whisker-backend-key-pair: failed to sync secret cache: timed out waiting for the condition Jul 14 23:21:34.984263 kubelet[2104]: E0714 23:21:33.833481 2104 configmap.go:193] Couldn't get configMap calico-system/whisker-ca-bundle: failed to sync configmap cache: timed out waiting for the condition Jul 14 23:21:35.295705 kubelet[2104]: E0714 23:21:35.295675 2104 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/secret/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-backend-key-pair podName:681c3e5d-7e9c-4690-8f31-b8e3038ba3d7 nodeName:}" failed. No retries permitted until 2025-07-14 23:21:35.442776802 +0000 UTC m=+577.657299905 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "whisker-backend-key-pair" (UniqueName: "kubernetes.io/secret/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-backend-key-pair") pod "whisker-7976686687-sr9b9" (UID: "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7") : failed to sync secret cache: timed out waiting for the condition Jul 14 23:21:35.313577 kubelet[2104]: E0714 23:21:35.299273 2104 nestedpendingoperations.go:348] Operation for "{volumeName:kubernetes.io/configmap/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-ca-bundle podName:681c3e5d-7e9c-4690-8f31-b8e3038ba3d7 nodeName:}" failed. No retries permitted until 2025-07-14 23:21:35.799243269 +0000 UTC m=+578.013766372 (durationBeforeRetry 500ms). Error: MountVolume.SetUp failed for volume "whisker-ca-bundle" (UniqueName: "kubernetes.io/configmap/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-ca-bundle") pod "whisker-7976686687-sr9b9" (UID: "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7") : failed to sync configmap cache: timed out waiting for the condition Jul 14 23:21:35.826000 audit[6513]: NETFILTER_CFG table=filter:147 family=2 entries=10 op=nft_register_rule pid=6513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:21:35.894590 kernel: audit: type=1325 audit(1752535295.826:1692): table=filter:147 family=2 entries=10 op=nft_register_rule pid=6513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:21:35.901968 kernel: audit: type=1300 audit(1752535295.826:1692): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff16f3e620 a2=0 a3=7fff16f3e60c items=0 ppid=2207 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:35.903578 kernel: audit: type=1327 audit(1752535295.826:1692): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:21:35.905879 kernel: audit: type=1325 audit(1752535295.834:1693): table=nat:148 family=2 entries=32 op=nft_register_rule pid=6513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:21:35.905914 kernel: audit: type=1300 audit(1752535295.834:1693): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff16f3e620 a2=0 a3=7fff16f3e60c items=0 ppid=2207 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:35.906890 kernel: audit: type=1327 audit(1752535295.834:1693): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:21:35.826000 audit[6513]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff16f3e620 a2=0 a3=7fff16f3e60c items=0 ppid=2207 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:35.826000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:21:35.834000 audit[6513]: NETFILTER_CFG table=nat:148 family=2 entries=32 op=nft_register_rule pid=6513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:21:35.834000 audit[6513]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fff16f3e620 a2=0 a3=7fff16f3e60c items=0 ppid=2207 pid=6513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:35.834000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:21:37.526585 kubelet[2104]: E0714 23:21:37.523128 2104 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.532s" Jul 14 23:21:37.872740 kubelet[2104]: I0714 23:21:37.544017 2104 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-7976686687-sr9b9" podStartSLOduration=486.92892705 podStartE2EDuration="8m51.4893269s" podCreationTimestamp="2025-07-14 23:12:46 +0000 UTC" firstStartedPulling="2025-07-14 23:12:47.354868855 +0000 UTC m=+49.569391956" lastFinishedPulling="2025-07-14 23:13:31.915268702 +0000 UTC m=+94.129791806" observedRunningTime="2025-07-14 23:21:37.049180363 +0000 UTC m=+579.263703472" watchObservedRunningTime="2025-07-14 23:21:37.4893269 +0000 UTC m=+579.703850012" Jul 14 23:21:39.121512 env[1250]: time="2025-07-14T23:21:39.121086608Z" level=info msg="StopContainer for \"79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319\" with timeout 300 (s)" Jul 14 23:21:39.121512 env[1250]: time="2025-07-14T23:21:39.121176269Z" level=info msg="StopContainer for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" with timeout 30 (s)" Jul 14 23:21:39.121512 env[1250]: time="2025-07-14T23:21:39.121463069Z" level=info msg="StopContainer for \"ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0\" with timeout 30 (s)" Jul 14 23:21:39.296835 env[1250]: time="2025-07-14T23:21:39.134578483Z" level=info msg="Stop container \"79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319\" with signal terminated" Jul 14 23:21:39.296835 env[1250]: time="2025-07-14T23:21:39.144872597Z" level=info msg="Stop container \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" with signal terminated" Jul 14 23:21:39.296835 env[1250]: time="2025-07-14T23:21:39.147474855Z" level=info msg="Stop container \"ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0\" with signal terminated" Jul 14 23:21:39.313810 systemd[1]: cri-containerd-712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3.scope: Deactivated successfully. Jul 14 23:21:39.335552 kernel: audit: type=1334 audit(1752535299.312:1694): prog-id=219 op=UNLOAD Jul 14 23:21:39.312000 audit: BPF prog-id=219 op=UNLOAD Jul 14 23:21:39.318000 audit: BPF prog-id=222 op=UNLOAD Jul 14 23:21:39.320000 audit: BPF prog-id=84 op=UNLOAD Jul 14 23:21:39.320000 audit: BPF prog-id=86 op=UNLOAD Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.318304024Z" level=info msg="shim disconnected" id=ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0 Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.318333906Z" level=warning msg="cleaning up after shim disconnected" id=ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0 namespace=k8s.io Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.318340502Z" level=info msg="cleaning up dead shim" Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.337494795Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6574 runtime=io.containerd.runc.v2\n" Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.339648850Z" level=info msg="shim disconnected" id=712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3 Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.339674840Z" level=warning msg="cleaning up after shim disconnected" id=712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3 namespace=k8s.io Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.339680554Z" level=info msg="cleaning up dead shim" Jul 14 23:21:39.359893 env[1250]: time="2025-07-14T23:21:39.347382021Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6587 runtime=io.containerd.runc.v2\ntime=\"2025-07-14T23:21:39Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Jul 14 23:21:39.313977 systemd[1]: cri-containerd-712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3.scope: Consumed 2.178s CPU time. Jul 14 23:21:39.315596 systemd[1]: cri-containerd-ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0.scope: Deactivated successfully. Jul 14 23:21:39.315730 systemd[1]: cri-containerd-ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0.scope: Consumed 5.479s CPU time. Jul 14 23:21:39.322141 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0-rootfs.mount: Deactivated successfully. Jul 14 23:21:39.329778 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3-rootfs.mount: Deactivated successfully. Jul 14 23:21:39.369180 env[1250]: time="2025-07-14T23:21:39.369156937Z" level=info msg="StopContainer for \"ff0e8f4b690c95b0eb8f8875f4038a3a6b727ff1c4f1801e5c36e9117aaff0e0\" returns successfully" Jul 14 23:21:39.372132 env[1250]: time="2025-07-14T23:21:39.372042889Z" level=info msg="StopContainer for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" returns successfully" Jul 14 23:21:39.389791 systemd[1]: Started sshd@16-139.178.70.103:22-139.178.89.65:48262.service. Jul 14 23:21:39.390000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.103:22-139.178.89.65:48262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:39.433917 update_engine[1244]: I0714 23:21:39.428398 1244 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:21:39.438160 kubelet[2104]: E0714 23:21:39.438129 2104 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.626s" Jul 14 23:21:39.446247 update_engine[1244]: I0714 23:21:39.446036 1244 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:21:39.446247 update_engine[1244]: E0714 23:21:39.446141 1244 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:21:39.446247 update_engine[1244]: I0714 23:21:39.446220 1244 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Jul 14 23:21:39.542247 env[1250]: time="2025-07-14T23:21:39.542172216Z" level=info msg="CreateContainer within sandbox \"b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 14 23:21:39.545563 env[1250]: time="2025-07-14T23:21:39.542172221Z" level=info msg="CreateContainer within sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" for container &ContainerMetadata{Name:goldmane,Attempt:1,}" Jul 14 23:21:39.577355 env[1250]: time="2025-07-14T23:21:39.577324720Z" level=info msg="StopContainer for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" with timeout 30 (s)" Jul 14 23:21:39.586728 env[1250]: time="2025-07-14T23:21:39.585806317Z" level=info msg="StopContainer for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" with timeout 30 (s)" Jul 14 23:21:39.593597 env[1250]: time="2025-07-14T23:21:39.592890553Z" level=info msg="Stop container \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" with signal terminated" Jul 14 23:21:39.600173 env[1250]: time="2025-07-14T23:21:39.600147081Z" level=info msg="Stop container \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" with signal terminated" Jul 14 23:21:39.600000 audit[6602]: USER_ACCT pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.603304 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 14 23:21:39.604984 kernel: audit: type=1101 audit(1752535299.600:1699): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.605013 sshd[6602]: Accepted publickey for core from 139.178.89.65 port 48262 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:21:39.609000 audit[6602]: CRED_ACQ pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.615735 kernel: audit: type=1103 audit(1752535299.609:1700): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.615786 kernel: audit: type=1006 audit(1752535299.609:1701): pid=6602 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 14 23:21:39.615807 kernel: audit: type=1300 audit(1752535299.609:1701): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcbd9c2b0 a2=3 a3=0 items=0 ppid=1 pid=6602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.609000 audit[6602]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdcbd9c2b0 a2=3 a3=0 items=0 ppid=1 pid=6602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.637038 kernel: audit: type=1327 audit(1752535299.609:1701): proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:39.609000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:39.620632 sshd[6602]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:21:39.650689 systemd[1]: cri-containerd-b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8.scope: Deactivated successfully. Jul 14 23:21:39.662568 kernel: audit: type=1334 audit(1752535299.649:1702): prog-id=196 op=UNLOAD Jul 14 23:21:39.662628 kernel: audit: type=1334 audit(1752535299.656:1703): prog-id=199 op=UNLOAD Jul 14 23:21:39.649000 audit: BPF prog-id=196 op=UNLOAD Jul 14 23:21:39.656000 audit: BPF prog-id=199 op=UNLOAD Jul 14 23:21:39.650847 systemd[1]: cri-containerd-b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8.scope: Consumed 1.780s CPU time. Jul 14 23:21:39.684248 env[1250]: time="2025-07-14T23:21:39.684214577Z" level=info msg="shim disconnected" id=b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8 Jul 14 23:21:39.684248 env[1250]: time="2025-07-14T23:21:39.684246556Z" level=warning msg="cleaning up after shim disconnected" id=b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8 namespace=k8s.io Jul 14 23:21:39.684722 env[1250]: time="2025-07-14T23:21:39.684254451Z" level=info msg="cleaning up dead shim" Jul 14 23:21:39.689799 env[1250]: time="2025-07-14T23:21:39.689776572Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6632 runtime=io.containerd.runc.v2\n" Jul 14 23:21:39.771640 env[1250]: time="2025-07-14T23:21:39.771591436Z" level=info msg="CreateContainer within sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" for &ContainerMetadata{Name:goldmane,Attempt:1,} returns container id \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\"" Jul 14 23:21:39.775700 env[1250]: time="2025-07-14T23:21:39.775582406Z" level=info msg="StartContainer for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\"" Jul 14 23:21:39.781647 env[1250]: time="2025-07-14T23:21:39.781612012Z" level=info msg="StopContainer for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" returns successfully" Jul 14 23:21:39.785623 env[1250]: time="2025-07-14T23:21:39.785598598Z" level=info msg="StopPodSandbox for \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\"" Jul 14 23:21:39.785721 env[1250]: time="2025-07-14T23:21:39.785643024Z" level=info msg="Container to stop \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:39.788703 env[1250]: time="2025-07-14T23:21:39.788681206Z" level=info msg="CreateContainer within sandbox \"b1284b6c19ff9613ab3208238abc5203b93f08322c4fc3623b4138dc563e4ca4\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"6f7fe1c369f6a2619c79344090195d30bac9d0bf7de9cd9176f03c1557b829e3\"" Jul 14 23:21:39.789164 env[1250]: time="2025-07-14T23:21:39.789149443Z" level=info msg="StartContainer for \"6f7fe1c369f6a2619c79344090195d30bac9d0bf7de9cd9176f03c1557b829e3\"" Jul 14 23:21:39.799070 systemd[1]: Started cri-containerd-ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144.scope. Jul 14 23:21:39.799792 systemd[1]: Started session-19.scope. Jul 14 23:21:39.800235 systemd-logind[1242]: New session 19 of user core. Jul 14 23:21:39.821237 kernel: audit: type=1105 audit(1752535299.812:1704): pid=6602 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.821318 kernel: audit: type=1103 audit(1752535299.816:1705): pid=6675 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.812000 audit[6602]: USER_START pid=6602 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.816000 audit[6675]: CRED_ACQ pid=6675 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:39.834726 systemd[1]: Started cri-containerd-6f7fe1c369f6a2619c79344090195d30bac9d0bf7de9cd9176f03c1557b829e3.scope. Jul 14 23:21:39.844557 systemd[1]: cri-containerd-be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42.scope: Deactivated successfully. Jul 14 23:21:39.843000 audit: BPF prog-id=142 op=UNLOAD Jul 14 23:21:39.846462 kernel: audit: type=1334 audit(1752535299.843:1706): prog-id=142 op=UNLOAD Jul 14 23:21:39.851000 audit: BPF prog-id=145 op=UNLOAD Jul 14 23:21:39.861807 env[1250]: time="2025-07-14T23:21:39.861771078Z" level=info msg="shim disconnected" id=be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42 Jul 14 23:21:39.862362 env[1250]: time="2025-07-14T23:21:39.862348019Z" level=warning msg="cleaning up after shim disconnected" id=be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42 namespace=k8s.io Jul 14 23:21:39.864042 env[1250]: time="2025-07-14T23:21:39.862448147Z" level=info msg="cleaning up dead shim" Jul 14 23:21:39.870430 env[1250]: time="2025-07-14T23:21:39.870364152Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:39Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6708 runtime=io.containerd.runc.v2\n" Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.881000 audit: BPF prog-id=234 op=LOAD Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=3881 pid=6652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353936386466343435646633353734313134666466303734356638 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=3881 pid=6652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353936386466343435646633353734313134666466303734356638 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit: BPF prog-id=235 op=LOAD Jul 14 23:21:39.882000 audit[6652]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c00027e9b0 items=0 ppid=3881 pid=6652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353936386466343435646633353734313134666466303734356638 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit: BPF prog-id=236 op=LOAD Jul 14 23:21:39.882000 audit[6652]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c00027e9f8 items=0 ppid=3881 pid=6652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353936386466343435646633353734313134666466303734356638 Jul 14 23:21:39.882000 audit: BPF prog-id=236 op=UNLOAD Jul 14 23:21:39.882000 audit: BPF prog-id=235 op=UNLOAD Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { perfmon } for pid=6652 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit[6652]: AVC avc: denied { bpf } for pid=6652 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.882000 audit: BPF prog-id=237 op=LOAD Jul 14 23:21:39.882000 audit[6652]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c00027ee08 items=0 ppid=3881 pid=6652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.882000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6365353936386466343435646633353734313134666466303734356638 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit: BPF prog-id=238 op=LOAD Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1798 pid=6674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666376665316333363966366132363139633739333434303930313935 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1798 pid=6674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666376665316333363966366132363139633739333434303930313935 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit: BPF prog-id=239 op=LOAD Jul 14 23:21:39.909000 audit[6674]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002ba7c0 items=0 ppid=1798 pid=6674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666376665316333363966366132363139633739333434303930313935 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit: BPF prog-id=240 op=LOAD Jul 14 23:21:39.909000 audit[6674]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002ba808 items=0 ppid=1798 pid=6674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666376665316333363966366132363139633739333434303930313935 Jul 14 23:21:39.909000 audit: BPF prog-id=240 op=UNLOAD Jul 14 23:21:39.909000 audit: BPF prog-id=239 op=UNLOAD Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { perfmon } for pid=6674 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit[6674]: AVC avc: denied { bpf } for pid=6674 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:39.909000 audit: BPF prog-id=241 op=LOAD Jul 14 23:21:39.909000 audit[6674]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002bac18 items=0 ppid=1798 pid=6674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:39.909000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3666376665316333363966366132363139633739333434303930313935 Jul 14 23:21:39.968056 env[1250]: time="2025-07-14T23:21:39.968022895Z" level=info msg="StartContainer for \"6f7fe1c369f6a2619c79344090195d30bac9d0bf7de9cd9176f03c1557b829e3\" returns successfully" Jul 14 23:21:39.980462 env[1250]: time="2025-07-14T23:21:39.980435751Z" level=info msg="StartContainer for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" returns successfully" Jul 14 23:21:40.001756 systemd[1]: cri-containerd-4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768.scope: Deactivated successfully. Jul 14 23:21:40.000000 audit: BPF prog-id=204 op=UNLOAD Jul 14 23:21:40.001931 systemd[1]: cri-containerd-4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768.scope: Consumed 1.639s CPU time. Jul 14 23:21:40.005000 audit: BPF prog-id=207 op=UNLOAD Jul 14 23:21:40.029267 env[1250]: time="2025-07-14T23:21:40.029229555Z" level=info msg="shim disconnected" id=4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768 Jul 14 23:21:40.029404 env[1250]: time="2025-07-14T23:21:40.029392050Z" level=warning msg="cleaning up after shim disconnected" id=4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768 namespace=k8s.io Jul 14 23:21:40.029467 env[1250]: time="2025-07-14T23:21:40.029456767Z" level=info msg="cleaning up dead shim" Jul 14 23:21:40.038227 env[1250]: time="2025-07-14T23:21:40.038193281Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6765 runtime=io.containerd.runc.v2\n" Jul 14 23:21:40.057285 env[1250]: time="2025-07-14T23:21:40.057243532Z" level=info msg="StopContainer for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" returns successfully" Jul 14 23:21:40.223188 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1573521846.mount: Deactivated successfully. Jul 14 23:21:40.223256 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount385614389.mount: Deactivated successfully. Jul 14 23:21:40.223302 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768-rootfs.mount: Deactivated successfully. Jul 14 23:21:40.223339 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8-rootfs.mount: Deactivated successfully. Jul 14 23:21:40.223382 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42-rootfs.mount: Deactivated successfully. Jul 14 23:21:40.223422 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42-shm.mount: Deactivated successfully. Jul 14 23:21:40.225587 env[1250]: time="2025-07-14T23:21:40.225565387Z" level=info msg="StopPodSandbox for \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\"" Jul 14 23:21:40.225836 env[1250]: time="2025-07-14T23:21:40.225822628Z" level=info msg="Container to stop \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:40.235645 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea-shm.mount: Deactivated successfully. Jul 14 23:21:40.259991 systemd[1]: cri-containerd-2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea.scope: Deactivated successfully. Jul 14 23:21:40.258000 audit: BPF prog-id=158 op=UNLOAD Jul 14 23:21:40.261000 audit: BPF prog-id=161 op=UNLOAD Jul 14 23:21:40.279229 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea-rootfs.mount: Deactivated successfully. Jul 14 23:21:40.280195 env[1250]: time="2025-07-14T23:21:40.280168637Z" level=info msg="shim disconnected" id=2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea Jul 14 23:21:40.280356 env[1250]: time="2025-07-14T23:21:40.280343853Z" level=warning msg="cleaning up after shim disconnected" id=2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea namespace=k8s.io Jul 14 23:21:40.280444 env[1250]: time="2025-07-14T23:21:40.280429635Z" level=info msg="cleaning up dead shim" Jul 14 23:21:40.290254 env[1250]: time="2025-07-14T23:21:40.290227297Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6809 runtime=io.containerd.runc.v2\n" Jul 14 23:21:41.283411 systemd-networkd[1061]: caliefe5b2c4116: Link DOWN Jul 14 23:21:41.283430 systemd-networkd[1061]: caliefe5b2c4116: Lost carrier Jul 14 23:21:41.288288 systemd-networkd[1061]: cali60db47f240a: Link DOWN Jul 14 23:21:41.288291 systemd-networkd[1061]: cali60db47f240a: Lost carrier Jul 14 23:21:42.201000 audit[6871]: NETFILTER_CFG table=filter:149 family=2 entries=67 op=nft_register_rule pid=6871 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:21:42.201000 audit[6871]: SYSCALL arch=c000003e syscall=46 success=yes exit=5620 a0=3 a1=7ffd459be990 a2=0 a3=7ffd459be97c items=0 ppid=3389 pid=6871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:42.201000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:21:42.202000 audit[6871]: NETFILTER_CFG table=filter:150 family=2 entries=6 op=nft_unregister_chain pid=6871 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:21:42.202000 audit[6871]: SYSCALL arch=c000003e syscall=46 success=yes exit=848 a0=3 a1=7ffd459be990 a2=0 a3=55d2db4bb000 items=0 ppid=3389 pid=6871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:42.202000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.077 [INFO][6835] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.111 [INFO][6835] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" iface="eth0" netns="/var/run/netns/cni-1def4f8c-0925-b3c3-8d47-52b82e7f6b01" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.131 [INFO][6835] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" iface="eth0" netns="/var/run/netns/cni-1def4f8c-0925-b3c3-8d47-52b82e7f6b01" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.173 [INFO][6835] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" after=61.855202ms iface="eth0" netns="/var/run/netns/cni-1def4f8c-0925-b3c3-8d47-52b82e7f6b01" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.173 [INFO][6835] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.173 [INFO][6835] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:43.398 [INFO][6853] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:43.498 [INFO][6853] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:43.498 [INFO][6853] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.317 [INFO][6853] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.318 [INFO][6853] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.325 [INFO][6853] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.388 [INFO][6835] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.098 [INFO][6752] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.111 [INFO][6752] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" iface="eth0" netns="/var/run/netns/cni-e41d5642-500a-431c-b57c-6853021b1deb" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.131 [INFO][6752] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" iface="eth0" netns="/var/run/netns/cni-e41d5642-500a-431c-b57c-6853021b1deb" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.177 [INFO][6752] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" after=66.003834ms iface="eth0" netns="/var/run/netns/cni-e41d5642-500a-431c-b57c-6853021b1deb" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.177 [INFO][6752] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:41.177 [INFO][6752] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:43.398 [INFO][6852] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:43.498 [INFO][6852] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.324 [INFO][6852] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.378 [INFO][6852] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.378 [INFO][6852] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.379 [INFO][6852] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:44.532294 env[1250]: 2025-07-14 23:21:44.388 [INFO][6752] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:21:44.532294 env[1250]: time="2025-07-14T23:21:44.534083673Z" level=info msg="TearDown network for sandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" successfully" Jul 14 23:21:44.532294 env[1250]: time="2025-07-14T23:21:44.534112805Z" level=info msg="StopPodSandbox for \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" returns successfully" Jul 14 23:21:44.686452 env[1250]: time="2025-07-14T23:21:44.537520297Z" level=info msg="TearDown network for sandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" successfully" Jul 14 23:21:44.686452 env[1250]: time="2025-07-14T23:21:44.537534532Z" level=info msg="StopPodSandbox for \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" returns successfully" Jul 14 23:21:44.601943 systemd[1]: run-netns-cni\x2d1def4f8c\x2d0925\x2db3c3\x2d8d47\x2d52b82e7f6b01.mount: Deactivated successfully. Jul 14 23:21:44.602046 systemd[1]: run-netns-cni\x2de41d5642\x2d500a\x2d431c\x2db57c\x2d6853021b1deb.mount: Deactivated successfully. Jul 14 23:21:46.408000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:46.457088 kernel: kauditd_printk_skb: 125 callbacks suppressed Jul 14 23:21:46.463356 kernel: audit: type=1400 audit(1752535306.408:1750): avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:46.466928 kernel: audit: type=1300 audit(1752535306.408:1750): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007aac60 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:21:46.466977 kernel: audit: type=1327 audit(1752535306.408:1750): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:21:46.467002 kernel: audit: type=1400 audit(1752535306.410:1751): avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:46.467063 kernel: audit: type=1300 audit(1752535306.410:1751): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00048e320 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:21:46.467081 kernel: audit: type=1327 audit(1752535306.410:1751): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:21:46.408000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007aac60 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:21:46.408000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:21:46.410000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:46.410000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00048e320 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:21:46.410000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:21:48.337431 env[1250]: time="2025-07-14T23:21:48.337307481Z" level=info msg="StopContainer for \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\" with timeout 2 (s)" Jul 14 23:21:48.337431 env[1250]: time="2025-07-14T23:21:48.337542987Z" level=info msg="Stop container \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\" with signal terminated" Jul 14 23:21:48.417424 systemd[1]: cri-containerd-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2.scope: Deactivated successfully. Jul 14 23:21:48.435656 kernel: audit: type=1334 audit(1752535308.423:1752): prog-id=132 op=UNLOAD Jul 14 23:21:48.435719 kernel: audit: type=1334 audit(1752535308.426:1753): prog-id=135 op=UNLOAD Jul 14 23:21:48.423000 audit: BPF prog-id=132 op=UNLOAD Jul 14 23:21:48.426000 audit: BPF prog-id=135 op=UNLOAD Jul 14 23:21:48.417578 systemd[1]: cri-containerd-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2.scope: Consumed 9.597s CPU time. Jul 14 23:21:48.424540 systemd[1]: cri-containerd-79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319.scope: Deactivated successfully. Jul 14 23:21:48.424689 systemd[1]: cri-containerd-79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319.scope: Consumed 1.454s CPU time. Jul 14 23:21:48.452533 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2-rootfs.mount: Deactivated successfully. Jul 14 23:21:48.457652 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319-rootfs.mount: Deactivated successfully. Jul 14 23:21:48.459617 env[1250]: time="2025-07-14T23:21:48.459581730Z" level=info msg="shim disconnected" id=ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2 Jul 14 23:21:48.459767 env[1250]: time="2025-07-14T23:21:48.459750569Z" level=warning msg="cleaning up after shim disconnected" id=ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2 namespace=k8s.io Jul 14 23:21:48.459863 env[1250]: time="2025-07-14T23:21:48.459850460Z" level=info msg="cleaning up dead shim" Jul 14 23:21:48.460187 env[1250]: time="2025-07-14T23:21:48.460170208Z" level=info msg="shim disconnected" id=79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319 Jul 14 23:21:48.460987 env[1250]: time="2025-07-14T23:21:48.460974217Z" level=warning msg="cleaning up after shim disconnected" id=79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319 namespace=k8s.io Jul 14 23:21:48.461061 env[1250]: time="2025-07-14T23:21:48.461050951Z" level=info msg="cleaning up dead shim" Jul 14 23:21:48.479359 env[1250]: time="2025-07-14T23:21:48.479317677Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6941 runtime=io.containerd.runc.v2\n" Jul 14 23:21:48.487274 env[1250]: time="2025-07-14T23:21:48.487231715Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6942 runtime=io.containerd.runc.v2\n" Jul 14 23:21:48.490026 env[1250]: time="2025-07-14T23:21:48.490001236Z" level=info msg="StopContainer for \"ab1b52b22e010c57871351b533b0968a031f18ddb61dfff3d917a899155553f2\" returns successfully" Jul 14 23:21:48.494410 env[1250]: time="2025-07-14T23:21:48.494380927Z" level=info msg="StopContainer for \"79e9b121298e5550f9b27c307782059475880d4d906667cf79cb3d0c57868319\" returns successfully" Jul 14 23:21:48.604808 kubelet[2104]: E0714 23:21:48.604732 2104 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.43s" Jul 14 23:21:48.646614 env[1250]: time="2025-07-14T23:21:48.646575620Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for container &ContainerMetadata{Name:calico-node,Attempt:1,}" Jul 14 23:21:48.646956 env[1250]: time="2025-07-14T23:21:48.646765838Z" level=info msg="CreateContainer within sandbox \"70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788\" for container &ContainerMetadata{Name:calico-typha,Attempt:1,}" Jul 14 23:21:48.718834 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4055325872.mount: Deactivated successfully. Jul 14 23:21:48.721735 env[1250]: time="2025-07-14T23:21:48.721706865Z" level=info msg="CreateContainer within sandbox \"70c34d77a208a926b69f0ffa8b2764986cebad999a1c8b93c544d4a05f83c788\" for &ContainerMetadata{Name:calico-typha,Attempt:1,} returns container id \"5d2cb7e268272ed39075b6817d7eed51868309cc3ce3fa35fcf88a1af7716ca2\"" Jul 14 23:21:48.723212 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1662672172.mount: Deactivated successfully. Jul 14 23:21:48.727299 env[1250]: time="2025-07-14T23:21:48.727267867Z" level=info msg="CreateContainer within sandbox \"22037b5a04eb4ca20796202332fcf4d1ad8464100780287e3cabedaafa74e3d0\" for &ContainerMetadata{Name:calico-node,Attempt:1,} returns container id \"7b3e3b787edfc14b7de343ab13c108e52694792216a861fe161e1883f5f992ef\"" Jul 14 23:21:48.728638 kubelet[2104]: I0714 23:21:48.728619 2104 scope.go:117] "RemoveContainer" containerID="b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8" Jul 14 23:21:48.743396 env[1250]: time="2025-07-14T23:21:48.743374561Z" level=info msg="StartContainer for \"7b3e3b787edfc14b7de343ab13c108e52694792216a861fe161e1883f5f992ef\"" Jul 14 23:21:48.743610 env[1250]: time="2025-07-14T23:21:48.743392205Z" level=info msg="StartContainer for \"5d2cb7e268272ed39075b6817d7eed51868309cc3ce3fa35fcf88a1af7716ca2\"" Jul 14 23:21:48.748283 systemd[1]: Started sshd@17-139.178.70.103:22-139.178.89.65:48264.service. Jul 14 23:21:48.748000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.103:22-139.178.89.65:48264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:48.753431 kernel: audit: type=1130 audit(1752535308.748:1754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.103:22-139.178.89.65:48264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:48.754856 env[1250]: time="2025-07-14T23:21:48.754656045Z" level=info msg="RemoveContainer for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\"" Jul 14 23:21:48.758817 env[1250]: time="2025-07-14T23:21:48.758573568Z" level=info msg="RemoveContainer for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" returns successfully" Jul 14 23:21:48.759465 kubelet[2104]: I0714 23:21:48.758719 2104 scope.go:117] "RemoveContainer" containerID="b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8" Jul 14 23:21:48.760435 env[1250]: time="2025-07-14T23:21:48.760406359Z" level=info msg="StopContainer for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" with timeout 30 (s)" Jul 14 23:21:48.760683 env[1250]: time="2025-07-14T23:21:48.760641705Z" level=error msg="ContainerStatus for \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\": not found" Jul 14 23:21:48.760917 sshd[6602]: pam_unix(sshd:session): session closed for user core Jul 14 23:21:48.762854 env[1250]: time="2025-07-14T23:21:48.761379144Z" level=info msg="Stop container \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" with signal terminated" Jul 14 23:21:48.766059 kubelet[2104]: E0714 23:21:48.766032 2104 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\": not found" containerID="b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8" Jul 14 23:21:48.766204 kubelet[2104]: I0714 23:21:48.766186 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8"} err="failed to get container status \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\": rpc error: code = NotFound desc = an error occurred when try to find container \"b478e2e2602b271709269b9d0ebde303aeb28aa9870d6ba21e52c34852dd2cd8\": not found" Jul 14 23:21:48.766440 kubelet[2104]: I0714 23:21:48.766401 2104 scope.go:117] "RemoveContainer" containerID="4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768" Jul 14 23:21:48.769128 env[1250]: time="2025-07-14T23:21:48.769106496Z" level=info msg="StopContainer for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" with timeout 30 (s)" Jul 14 23:21:48.769339 env[1250]: time="2025-07-14T23:21:48.769327197Z" level=info msg="StopContainer for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" with timeout 30 (s)" Jul 14 23:21:48.769999 env[1250]: time="2025-07-14T23:21:48.769986464Z" level=info msg="StopContainer for \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\" with timeout 30 (s)" Jul 14 23:21:48.770380 env[1250]: time="2025-07-14T23:21:48.770367682Z" level=info msg="Stop container \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\" with signal terminated" Jul 14 23:21:48.770507 env[1250]: time="2025-07-14T23:21:48.770495693Z" level=info msg="Stop container \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" with signal terminated" Jul 14 23:21:48.772245 env[1250]: time="2025-07-14T23:21:48.772224165Z" level=info msg="Stop container \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" with signal terminated" Jul 14 23:21:48.775305 env[1250]: time="2025-07-14T23:21:48.775286492Z" level=info msg="RemoveContainer for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\"" Jul 14 23:21:48.774000 audit[6602]: USER_END pid=6602 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:48.780503 kernel: audit: type=1106 audit(1752535308.774:1755): pid=6602 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:48.781637 env[1250]: time="2025-07-14T23:21:48.781375080Z" level=info msg="RemoveContainer for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" returns successfully" Jul 14 23:21:48.780000 audit[6602]: CRED_DISP pid=6602 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:48.782035 kubelet[2104]: I0714 23:21:48.781959 2104 scope.go:117] "RemoveContainer" containerID="4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768" Jul 14 23:21:48.782354 env[1250]: time="2025-07-14T23:21:48.782322595Z" level=error msg="ContainerStatus for \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\": not found" Jul 14 23:21:48.782545 kubelet[2104]: E0714 23:21:48.782488 2104 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\": not found" containerID="4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768" Jul 14 23:21:48.782545 kubelet[2104]: I0714 23:21:48.782515 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768"} err="failed to get container status \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\": rpc error: code = NotFound desc = an error occurred when try to find container \"4c67c21ecb29381c0fdc32680a396373b0939d0e8cf083df36e1d9678a7cb768\": not found" Jul 14 23:21:48.790261 systemd[1]: sshd@16-139.178.70.103:22-139.178.89.65:48262.service: Deactivated successfully. Jul 14 23:21:48.789000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.103:22-139.178.89.65:48262 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:48.791700 systemd[1]: session-19.scope: Deactivated successfully. Jul 14 23:21:48.795485 systemd-logind[1242]: Session 19 logged out. Waiting for processes to exit. Jul 14 23:21:48.796307 systemd-logind[1242]: Removed session 19. Jul 14 23:21:48.827000 audit: BPF prog-id=234 op=UNLOAD Jul 14 23:21:48.828724 systemd[1]: Started cri-containerd-5d2cb7e268272ed39075b6817d7eed51868309cc3ce3fa35fcf88a1af7716ca2.scope. Jul 14 23:21:48.828869 systemd[1]: cri-containerd-ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144.scope: Deactivated successfully. Jul 14 23:21:48.830000 audit: BPF prog-id=237 op=UNLOAD Jul 14 23:21:48.840196 systemd[1]: Started cri-containerd-7b3e3b787edfc14b7de343ab13c108e52694792216a861fe161e1883f5f992ef.scope. Jul 14 23:21:48.892737 kubelet[2104]: I0714 23:21:48.892680 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8852s\" (UniqueName: \"kubernetes.io/projected/a08d23a3-9e4e-42f3-9191-147690a8736b-kube-api-access-8852s\") pod \"a08d23a3-9e4e-42f3-9191-147690a8736b\" (UID: \"a08d23a3-9e4e-42f3-9191-147690a8736b\") " Jul 14 23:21:48.893778 kubelet[2104]: I0714 23:21:48.892926 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9h8l9\" (UniqueName: \"kubernetes.io/projected/a344ebf2-1f08-4992-af9c-40b717e107d2-kube-api-access-9h8l9\") pod \"a344ebf2-1f08-4992-af9c-40b717e107d2\" (UID: \"a344ebf2-1f08-4992-af9c-40b717e107d2\") " Jul 14 23:21:48.893778 kubelet[2104]: I0714 23:21:48.892946 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a344ebf2-1f08-4992-af9c-40b717e107d2-tigera-ca-bundle\") pod \"a344ebf2-1f08-4992-af9c-40b717e107d2\" (UID: \"a344ebf2-1f08-4992-af9c-40b717e107d2\") " Jul 14 23:21:48.893778 kubelet[2104]: I0714 23:21:48.892958 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a08d23a3-9e4e-42f3-9191-147690a8736b-calico-apiserver-certs\") pod \"a08d23a3-9e4e-42f3-9191-147690a8736b\" (UID: \"a08d23a3-9e4e-42f3-9191-147690a8736b\") " Jul 14 23:21:48.894177 env[1250]: time="2025-07-14T23:21:48.894152458Z" level=error msg="Failed to delete exec process \"643ee5cd4c7e180adf3da086612155acfd50f0c71c12184e947780c20f673682\" for container \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\"" error="container not created: not found" Jul 14 23:21:48.894388 env[1250]: time="2025-07-14T23:21:48.894372853Z" level=error msg="ExecSync for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" failed" error="failed to exec in container: failed to start exec \"643ee5cd4c7e180adf3da086612155acfd50f0c71c12184e947780c20f673682\": OCI runtime exec failed: exec failed: cannot exec in a stopped container: unknown" Jul 14 23:21:48.894518 env[1250]: time="2025-07-14T23:21:48.894326418Z" level=info msg="shim disconnected" id=ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144 Jul 14 23:21:48.894580 env[1250]: time="2025-07-14T23:21:48.894568785Z" level=warning msg="cleaning up after shim disconnected" id=ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144 namespace=k8s.io Jul 14 23:21:48.894628 env[1250]: time="2025-07-14T23:21:48.894618226Z" level=info msg="cleaning up dead shim" Jul 14 23:21:48.900506 env[1250]: time="2025-07-14T23:21:48.900481711Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:48Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7053 runtime=io.containerd.runc.v2\n" Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.901000 audit: BPF prog-id=242 op=LOAD Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2526 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564326362376532363832373265643339303735623638313764376565 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2526 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564326362376532363832373265643339303735623638313764376565 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit: BPF prog-id=243 op=LOAD Jul 14 23:21:48.903000 audit[7003]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00038ab60 items=0 ppid=2526 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564326362376532363832373265643339303735623638313764376565 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit: BPF prog-id=244 op=LOAD Jul 14 23:21:48.903000 audit[7003]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00038aba8 items=0 ppid=2526 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564326362376532363832373265643339303735623638313764376565 Jul 14 23:21:48.903000 audit: BPF prog-id=244 op=UNLOAD Jul 14 23:21:48.903000 audit: BPF prog-id=243 op=UNLOAD Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { perfmon } for pid=7003 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit[7003]: AVC avc: denied { bpf } for pid=7003 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.903000 audit: BPF prog-id=245 op=LOAD Jul 14 23:21:48.903000 audit[7003]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00038afb8 items=0 ppid=2526 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.903000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564326362376532363832373265643339303735623638313764376565 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001176b0 a2=3c a3=7f08d0e27858 items=0 ppid=2554 pid=6975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762336533623738376564666331346237646533343361623133633130 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit: BPF prog-id=246 op=LOAD Jul 14 23:21:48.914000 audit[6975]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001179d8 a2=78 a3=c00026fc58 items=0 ppid=2554 pid=6975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762336533623738376564666331346237646533343361623133633130 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit: BPF prog-id=247 op=LOAD Jul 14 23:21:48.914000 audit[6975]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000117770 a2=78 a3=c00026fca8 items=0 ppid=2554 pid=6975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762336533623738376564666331346237646533343361623133633130 Jul 14 23:21:48.914000 audit: BPF prog-id=247 op=UNLOAD Jul 14 23:21:48.914000 audit: BPF prog-id=246 op=UNLOAD Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { perfmon } for pid=6975 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit[6975]: AVC avc: denied { bpf } for pid=6975 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:21:48.914000 audit: BPF prog-id=248 op=LOAD Jul 14 23:21:48.914000 audit[6975]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000117c30 a2=78 a3=c00026fd38 items=0 ppid=2554 pid=6975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:48.914000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762336533623738376564666331346237646533343361623133633130 Jul 14 23:21:48.941067 env[1250]: time="2025-07-14T23:21:48.906374720Z" level=error msg="ExecSync for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" failed" error="rpc error: code = NotFound desc = failed to exec in container: failed to load task: no running task found: task ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144 not found: not found" Jul 14 23:21:48.941067 env[1250]: time="2025-07-14T23:21:48.907179015Z" level=error msg="ExecSync for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" failed" error="rpc error: code = NotFound desc = failed to exec in container: failed to load task: no running task found: task ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144 not found: not found" Jul 14 23:21:48.941067 env[1250]: time="2025-07-14T23:21:48.924737111Z" level=info msg="StopContainer for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" returns successfully" Jul 14 23:21:48.941148 kubelet[2104]: E0714 23:21:48.905169 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = Unknown desc = failed to exec in container: failed to start exec \"643ee5cd4c7e180adf3da086612155acfd50f0c71c12184e947780c20f673682\": OCI runtime exec failed: exec failed: cannot exec in a stopped container: unknown" containerID="ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144" cmd=["/health","-ready"] Jul 14 23:21:48.941148 kubelet[2104]: E0714 23:21:48.906629 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = NotFound desc = failed to exec in container: failed to load task: no running task found: task ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144 not found: not found" containerID="ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144" cmd=["/health","-ready"] Jul 14 23:21:48.941148 kubelet[2104]: E0714 23:21:48.907230 2104 log.go:32] "ExecSync cmd from runtime service failed" err="rpc error: code = NotFound desc = failed to exec in container: failed to load task: no running task found: task ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144 not found: not found" containerID="ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144" cmd=["/health","-ready"] Jul 14 23:21:48.946169 env[1250]: time="2025-07-14T23:21:48.946141511Z" level=info msg="StartContainer for \"5d2cb7e268272ed39075b6817d7eed51868309cc3ce3fa35fcf88a1af7716ca2\" returns successfully" Jul 14 23:21:48.955687 env[1250]: time="2025-07-14T23:21:48.955662712Z" level=info msg="StopPodSandbox for \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\"" Jul 14 23:21:48.955838 env[1250]: time="2025-07-14T23:21:48.955824369Z" level=info msg="Container to stop \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:48.955913 env[1250]: time="2025-07-14T23:21:48.955901164Z" level=info msg="Container to stop \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:48.962000 audit: BPF prog-id=169 op=UNLOAD Jul 14 23:21:48.964090 systemd[1]: cri-containerd-955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789.scope: Deactivated successfully. Jul 14 23:21:48.965865 env[1250]: time="2025-07-14T23:21:48.965845113Z" level=info msg="StartContainer for \"7b3e3b787edfc14b7de343ab13c108e52694792216a861fe161e1883f5f992ef\" returns successfully" Jul 14 23:21:48.965000 audit: BPF prog-id=172 op=UNLOAD Jul 14 23:21:48.997839 env[1250]: time="2025-07-14T23:21:48.997807942Z" level=info msg="shim disconnected" id=955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789 Jul 14 23:21:48.997958 env[1250]: time="2025-07-14T23:21:48.997945698Z" level=warning msg="cleaning up after shim disconnected" id=955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789 namespace=k8s.io Jul 14 23:21:48.998019 env[1250]: time="2025-07-14T23:21:48.997999531Z" level=info msg="cleaning up dead shim" Jul 14 23:21:49.009200 systemd[1]: cri-containerd-6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d.scope: Deactivated successfully. Jul 14 23:21:49.009370 systemd[1]: cri-containerd-6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d.scope: Consumed 1.457s CPU time. Jul 14 23:21:49.007000 audit: BPF prog-id=200 op=UNLOAD Jul 14 23:21:49.011587 env[1250]: time="2025-07-14T23:21:49.011558587Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7099 runtime=io.containerd.runc.v2\n" Jul 14 23:21:49.011000 audit: BPF prog-id=203 op=UNLOAD Jul 14 23:21:49.021693 kubelet[2104]: I0714 23:21:49.021658 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/a344ebf2-1f08-4992-af9c-40b717e107d2-tigera-ca-bundle" (OuterVolumeSpecName: "tigera-ca-bundle") pod "a344ebf2-1f08-4992-af9c-40b717e107d2" (UID: "a344ebf2-1f08-4992-af9c-40b717e107d2"). InnerVolumeSpecName "tigera-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:21:49.022177 kubelet[2104]: I0714 23:21:49.022164 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a08d23a3-9e4e-42f3-9191-147690a8736b-kube-api-access-8852s" (OuterVolumeSpecName: "kube-api-access-8852s") pod "a08d23a3-9e4e-42f3-9191-147690a8736b" (UID: "a08d23a3-9e4e-42f3-9191-147690a8736b"). InnerVolumeSpecName "kube-api-access-8852s". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:49.028245 kubelet[2104]: I0714 23:21:49.028210 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/a08d23a3-9e4e-42f3-9191-147690a8736b-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "a08d23a3-9e4e-42f3-9191-147690a8736b" (UID: "a08d23a3-9e4e-42f3-9191-147690a8736b"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 14 23:21:49.028347 kubelet[2104]: I0714 23:21:49.028310 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/a344ebf2-1f08-4992-af9c-40b717e107d2-kube-api-access-9h8l9" (OuterVolumeSpecName: "kube-api-access-9h8l9") pod "a344ebf2-1f08-4992-af9c-40b717e107d2" (UID: "a344ebf2-1f08-4992-af9c-40b717e107d2"). InnerVolumeSpecName "kube-api-access-9h8l9". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:49.036556 env[1250]: time="2025-07-14T23:21:49.036519063Z" level=info msg="shim disconnected" id=6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d Jul 14 23:21:49.036725 env[1250]: time="2025-07-14T23:21:49.036713819Z" level=warning msg="cleaning up after shim disconnected" id=6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d namespace=k8s.io Jul 14 23:21:49.036791 env[1250]: time="2025-07-14T23:21:49.036781534Z" level=info msg="cleaning up dead shim" Jul 14 23:21:49.044561 env[1250]: time="2025-07-14T23:21:49.044532136Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7124 runtime=io.containerd.runc.v2\n" Jul 14 23:21:49.050037 env[1250]: time="2025-07-14T23:21:49.049998696Z" level=info msg="StopContainer for \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\" returns successfully" Jul 14 23:21:49.050779 env[1250]: time="2025-07-14T23:21:49.050759694Z" level=info msg="StopPodSandbox for \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\"" Jul 14 23:21:49.050830 env[1250]: time="2025-07-14T23:21:49.050800329Z" level=info msg="Container to stop \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:49.061062 systemd[1]: cri-containerd-d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0.scope: Deactivated successfully. Jul 14 23:21:49.059000 audit: BPF prog-id=154 op=UNLOAD Jul 14 23:21:49.064000 audit: BPF prog-id=157 op=UNLOAD Jul 14 23:21:49.077000 audit[6971]: USER_ACCT pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.079595 sshd[6971]: Accepted publickey for core from 139.178.89.65 port 48264 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:21:49.078000 audit[6971]: CRED_ACQ pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.078000 audit[6971]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcbef2fe40 a2=3 a3=0 items=0 ppid=1 pid=6971 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:49.078000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:49.090049 env[1250]: time="2025-07-14T23:21:49.090020494Z" level=info msg="shim disconnected" id=d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0 Jul 14 23:21:49.090180 env[1250]: time="2025-07-14T23:21:49.090168061Z" level=warning msg="cleaning up after shim disconnected" id=d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0 namespace=k8s.io Jul 14 23:21:49.090242 env[1250]: time="2025-07-14T23:21:49.090231773Z" level=info msg="cleaning up dead shim" Jul 14 23:21:49.092814 sshd[6971]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:21:49.094939 kubelet[2104]: I0714 23:21:49.094579 2104 reconciler_common.go:293] "Volume detached for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/a344ebf2-1f08-4992-af9c-40b717e107d2-tigera-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:49.094939 kubelet[2104]: I0714 23:21:49.094595 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-9h8l9\" (UniqueName: \"kubernetes.io/projected/a344ebf2-1f08-4992-af9c-40b717e107d2-kube-api-access-9h8l9\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:49.094939 kubelet[2104]: I0714 23:21:49.094605 2104 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/a08d23a3-9e4e-42f3-9191-147690a8736b-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:49.094939 kubelet[2104]: I0714 23:21:49.094611 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-8852s\" (UniqueName: \"kubernetes.io/projected/a08d23a3-9e4e-42f3-9191-147690a8736b-kube-api-access-8852s\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:49.102248 env[1250]: time="2025-07-14T23:21:49.102223453Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7160 runtime=io.containerd.runc.v2\n" Jul 14 23:21:49.181155 systemd[1]: Started session-20.scope. Jul 14 23:21:49.181537 systemd-logind[1242]: New session 20 of user core. Jul 14 23:21:49.186000 audit[6971]: USER_START pid=6971 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.187000 audit[7196]: CRED_ACQ pid=7196 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.253265 systemd[1]: Removed slice kubepods-besteffort-poda08d23a3_9e4e_42f3_9191_147690a8736b.slice. Jul 14 23:21:49.253323 systemd[1]: kubepods-besteffort-poda08d23a3_9e4e_42f3_9191_147690a8736b.slice: Consumed 1.806s CPU time. Jul 14 23:21:49.438551 update_engine[1244]: I0714 23:21:49.427726 1244 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:21:49.450000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.103:22-139.178.89.65:37668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:49.448167 sshd[6971]: pam_unix(sshd:session): session closed for user core Jul 14 23:21:49.452069 systemd[1]: Started sshd@18-139.178.70.103:22-139.178.89.65:37668.service. Jul 14 23:21:49.454000 audit[6971]: USER_END pid=6971 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.455000 audit[6971]: CRED_DISP pid=6971 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.457883 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144-rootfs.mount: Deactivated successfully. Jul 14 23:21:49.457937 systemd[1]: var-lib-kubelet-pods-a344ebf2\x2d1f08\x2d4992\x2daf9c\x2d40b717e107d2-volume\x2dsubpaths-tigera\x2dca\x2dbundle-calico\x2dkube\x2dcontrollers-1.mount: Deactivated successfully. Jul 14 23:21:49.457980 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d-rootfs.mount: Deactivated successfully. Jul 14 23:21:49.458016 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789-rootfs.mount: Deactivated successfully. Jul 14 23:21:49.461000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.103:22-139.178.89.65:48264 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:49.458051 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0-rootfs.mount: Deactivated successfully. Jul 14 23:21:49.458084 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789-shm.mount: Deactivated successfully. Jul 14 23:21:49.458123 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0-shm.mount: Deactivated successfully. Jul 14 23:21:49.458158 systemd[1]: var-lib-kubelet-pods-a344ebf2\x2d1f08\x2d4992\x2daf9c\x2d40b717e107d2-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9h8l9.mount: Deactivated successfully. Jul 14 23:21:49.458194 systemd[1]: var-lib-kubelet-pods-a08d23a3\x2d9e4e\x2d42f3\x2d9191\x2d147690a8736b-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8852s.mount: Deactivated successfully. Jul 14 23:21:49.458229 systemd[1]: var-lib-kubelet-pods-a08d23a3\x2d9e4e\x2d42f3\x2d9191\x2d147690a8736b-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 14 23:21:49.462530 systemd[1]: sshd@17-139.178.70.103:22-139.178.89.65:48264.service: Deactivated successfully. Jul 14 23:21:49.463106 systemd[1]: session-20.scope: Deactivated successfully. Jul 14 23:21:49.465052 systemd-logind[1242]: Session 20 logged out. Waiting for processes to exit. Jul 14 23:21:49.466338 systemd-logind[1242]: Removed session 20. Jul 14 23:21:49.483454 sshd[7218]: Accepted publickey for core from 139.178.89.65 port 37668 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:21:49.483713 sshd[7218]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:21:49.481000 audit[7218]: USER_ACCT pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.481000 audit[7218]: CRED_ACQ pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.482000 audit[7218]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe372329e0 a2=3 a3=0 items=0 ppid=1 pid=7218 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:49.482000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:49.488430 systemd[1]: Started session-21.scope. Jul 14 23:21:49.489083 update_engine[1244]: I0714 23:21:49.488804 1244 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:21:49.489083 update_engine[1244]: E0714 23:21:49.488888 1244 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:21:49.489083 update_engine[1244]: I0714 23:21:49.488940 1244 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Jul 14 23:21:49.489836 systemd-logind[1242]: New session 21 of user core. Jul 14 23:21:49.491000 audit[7218]: USER_START pid=7218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.492000 audit[7222]: CRED_ACQ pid=7222 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.613879 sshd[7218]: pam_unix(sshd:session): session closed for user core Jul 14 23:21:49.613000 audit[7218]: USER_END pid=7218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.613000 audit[7218]: CRED_DISP pid=7218 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:49.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.103:22-139.178.89.65:37668 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:49.615689 systemd[1]: sshd@18-139.178.70.103:22-139.178.89.65:37668.service: Deactivated successfully. Jul 14 23:21:49.616199 systemd[1]: session-21.scope: Deactivated successfully. Jul 14 23:21:49.617320 systemd-logind[1242]: Session 21 logged out. Waiting for processes to exit. Jul 14 23:21:49.617938 systemd-logind[1242]: Removed session 21. Jul 14 23:21:49.778512 systemd[1]: Removed slice kubepods-besteffort-poda344ebf2_1f08_4992_af9c_40b717e107d2.slice. Jul 14 23:21:49.778565 systemd[1]: kubepods-besteffort-poda344ebf2_1f08_4992_af9c_40b717e107d2.slice: Consumed 1.664s CPU time. Jul 14 23:21:49.782984 kubelet[2104]: I0714 23:21:49.780705 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:21:49.782984 kubelet[2104]: I0714 23:21:49.780790 2104 scope.go:117] "RemoveContainer" containerID="712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3" Jul 14 23:21:49.787011 kubelet[2104]: I0714 23:21:49.786675 2104 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:21:49.787207 env[1250]: time="2025-07-14T23:21:49.787180928Z" level=info msg="StopContainer for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" with timeout 30 (s)" Jul 14 23:21:49.787956 env[1250]: time="2025-07-14T23:21:49.787944316Z" level=info msg="StopContainer for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" with timeout 30 (s)" Jul 14 23:21:49.788315 env[1250]: time="2025-07-14T23:21:49.788272642Z" level=info msg="Stop container \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" with signal terminated" Jul 14 23:21:49.788481 env[1250]: time="2025-07-14T23:21:49.788465865Z" level=info msg="Stop container \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" with signal terminated" Jul 14 23:21:49.792144 env[1250]: time="2025-07-14T23:21:49.792117526Z" level=info msg="RemoveContainer for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\"" Jul 14 23:21:49.807798 systemd-networkd[1061]: cali8888556bd85: Link DOWN Jul 14 23:21:49.807803 systemd-networkd[1061]: cali8888556bd85: Lost carrier Jul 14 23:21:49.813866 env[1250]: time="2025-07-14T23:21:49.808989386Z" level=info msg="RemoveContainer for \"712f93386cb386b5fbb80e41b0b2c13163093c02739c50ceda507c8be1e384b3\" returns successfully" Jul 14 23:21:49.820663 systemd-networkd[1061]: cali8784943ba53: Link DOWN Jul 14 23:21:49.820668 systemd-networkd[1061]: cali8784943ba53: Lost carrier Jul 14 23:21:49.828477 systemd[1]: run-containerd-runc-k8s.io-7b3e3b787edfc14b7de343ab13c108e52694792216a861fe161e1883f5f992ef-runc.kGdWYq.mount: Deactivated successfully. Jul 14 23:21:49.847000 audit: BPF prog-id=230 op=UNLOAD Jul 14 23:21:49.848270 systemd[1]: cri-containerd-9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43.scope: Deactivated successfully. Jul 14 23:21:49.850000 audit: BPF prog-id=233 op=UNLOAD Jul 14 23:21:49.875863 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43-rootfs.mount: Deactivated successfully. Jul 14 23:21:49.880117 kubelet[2104]: I0714 23:21:49.880076 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="a08d23a3-9e4e-42f3-9191-147690a8736b" path="/var/lib/kubelet/pods/a08d23a3-9e4e-42f3-9191-147690a8736b/volumes" Jul 14 23:21:49.882590 kubelet[2104]: I0714 23:21:49.882526 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="a344ebf2-1f08-4992-af9c-40b717e107d2" path="/var/lib/kubelet/pods/a344ebf2-1f08-4992-af9c-40b717e107d2/volumes" Jul 14 23:21:49.894024 env[1250]: time="2025-07-14T23:21:49.893991897Z" level=info msg="shim disconnected" id=9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43 Jul 14 23:21:49.894024 env[1250]: time="2025-07-14T23:21:49.894020974Z" level=warning msg="cleaning up after shim disconnected" id=9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43 namespace=k8s.io Jul 14 23:21:49.894024 env[1250]: time="2025-07-14T23:21:49.894029983Z" level=info msg="cleaning up dead shim" Jul 14 23:21:49.900445 env[1250]: time="2025-07-14T23:21:49.900383944Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7295 runtime=io.containerd.runc.v2\n" Jul 14 23:21:49.903484 env[1250]: time="2025-07-14T23:21:49.903462737Z" level=info msg="StopContainer for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" returns successfully" Jul 14 23:21:49.907000 audit: BPF prog-id=223 op=UNLOAD Jul 14 23:21:49.908980 systemd[1]: cri-containerd-35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5.scope: Deactivated successfully. Jul 14 23:21:49.910000 audit: BPF prog-id=226 op=UNLOAD Jul 14 23:21:49.947646 env[1250]: time="2025-07-14T23:21:49.947605205Z" level=info msg="shim disconnected" id=35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5 Jul 14 23:21:49.947646 env[1250]: time="2025-07-14T23:21:49.947635876Z" level=warning msg="cleaning up after shim disconnected" id=35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5 namespace=k8s.io Jul 14 23:21:49.947646 env[1250]: time="2025-07-14T23:21:49.947643015Z" level=info msg="cleaning up dead shim" Jul 14 23:21:49.955781 env[1250]: time="2025-07-14T23:21:49.955263539Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7326 runtime=io.containerd.runc.v2\n" Jul 14 23:21:49.957260 env[1250]: time="2025-07-14T23:21:49.957232595Z" level=info msg="StopContainer for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" returns successfully" Jul 14 23:21:49.957578 env[1250]: time="2025-07-14T23:21:49.957561115Z" level=info msg="StopPodSandbox for \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\"" Jul 14 23:21:49.957621 env[1250]: time="2025-07-14T23:21:49.957598414Z" level=info msg="Container to stop \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:49.957621 env[1250]: time="2025-07-14T23:21:49.957609656Z" level=info msg="Container to stop \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:49.967000 audit: BPF prog-id=188 op=UNLOAD Jul 14 23:21:49.968839 systemd[1]: cri-containerd-c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065.scope: Deactivated successfully. Jul 14 23:21:49.972000 audit: BPF prog-id=191 op=UNLOAD Jul 14 23:21:49.990047 env[1250]: time="2025-07-14T23:21:49.990003118Z" level=info msg="shim disconnected" id=c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065 Jul 14 23:21:49.990140 env[1250]: time="2025-07-14T23:21:49.990050874Z" level=warning msg="cleaning up after shim disconnected" id=c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065 namespace=k8s.io Jul 14 23:21:49.990140 env[1250]: time="2025-07-14T23:21:49.990060130Z" level=info msg="cleaning up dead shim" Jul 14 23:21:49.997112 env[1250]: time="2025-07-14T23:21:49.997083598Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7356 runtime=io.containerd.runc.v2\n" Jul 14 23:21:50.085286 systemd-networkd[1061]: calibd3146c7eae: Link DOWN Jul 14 23:21:50.085291 systemd-networkd[1061]: calibd3146c7eae: Lost carrier Jul 14 23:21:50.453906 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5-rootfs.mount: Deactivated successfully. Jul 14 23:21:50.453973 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065-rootfs.mount: Deactivated successfully. Jul 14 23:21:50.454009 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065-shm.mount: Deactivated successfully. Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:49.749 [INFO][7198] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:49.749 [INFO][7198] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" iface="eth0" netns="/var/run/netns/cni-b91bc6fe-1a31-7be1-48fa-c382810ddd2d" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:49.752 [INFO][7198] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" iface="eth0" netns="/var/run/netns/cni-b91bc6fe-1a31-7be1-48fa-c382810ddd2d" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:49.775 [INFO][7198] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" after=25.999279ms iface="eth0" netns="/var/run/netns/cni-b91bc6fe-1a31-7be1-48fa-c382810ddd2d" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:49.775 [INFO][7198] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:49.775 [INFO][7198] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.407 [INFO][7247] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.415 [INFO][7247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.415 [INFO][7247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.517 [INFO][7247] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.517 [INFO][7247] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.519 [INFO][7247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:50.521605 env[1250]: 2025-07-14 23:21:50.520 [INFO][7198] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:21:50.523661 systemd[1]: run-netns-cni\x2db91bc6fe\x2d1a31\x2d7be1\x2d48fa\x2dc382810ddd2d.mount: Deactivated successfully. Jul 14 23:21:50.524689 env[1250]: time="2025-07-14T23:21:50.524665983Z" level=info msg="TearDown network for sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" successfully" Jul 14 23:21:50.524747 env[1250]: time="2025-07-14T23:21:50.524735262Z" level=info msg="StopPodSandbox for \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" returns successfully" Jul 14 23:21:50.602607 kubelet[2104]: I0714 23:21:50.602579 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8nfbw\" (UniqueName: \"kubernetes.io/projected/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-kube-api-access-8nfbw\") pod \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " Jul 14 23:21:50.602743 kubelet[2104]: I0714 23:21:50.602618 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-ca-bundle\") pod \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " Jul 14 23:21:50.602743 kubelet[2104]: I0714 23:21:50.602633 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-key-pair\") pod \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " Jul 14 23:21:50.602743 kubelet[2104]: I0714 23:21:50.602647 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-config\") pod \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\" (UID: \"1a21ac09-ca35-4722-b2a3-bce6c2fba7ee\") " Jul 14 23:21:50.604641 kubelet[2104]: I0714 23:21:50.604577 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-ca-bundle" (OuterVolumeSpecName: "goldmane-ca-bundle") pod "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee"). InnerVolumeSpecName "goldmane-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:21:50.605287 kubelet[2104]: I0714 23:21:50.605261 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-config" (OuterVolumeSpecName: "config") pod "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee"). InnerVolumeSpecName "config". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:21:50.618497 systemd[1]: var-lib-kubelet-pods-1a21ac09\x2dca35\x2d4722\x2db2a3\x2dbce6c2fba7ee-volumes-kubernetes.io\x7esecret-goldmane\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 23:21:50.620224 systemd[1]: var-lib-kubelet-pods-1a21ac09\x2dca35\x2d4722\x2db2a3\x2dbce6c2fba7ee-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8nfbw.mount: Deactivated successfully. Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:49.744 [INFO][7199] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:49.748 [INFO][7199] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" iface="eth0" netns="/var/run/netns/cni-12630aeb-26ba-09c8-f041-fdc430291c6d" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:49.752 [INFO][7199] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" iface="eth0" netns="/var/run/netns/cni-12630aeb-26ba-09c8-f041-fdc430291c6d" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:49.783 [INFO][7199] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" after=34.985052ms iface="eth0" netns="/var/run/netns/cni-12630aeb-26ba-09c8-f041-fdc430291c6d" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:49.783 [INFO][7199] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:49.783 [INFO][7199] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.407 [INFO][7249] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.415 [INFO][7249] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.519 [INFO][7249] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.611 [INFO][7249] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.611 [INFO][7249] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.614 [INFO][7249] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:50.623042 env[1250]: 2025-07-14 23:21:50.621 [INFO][7199] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:21:50.625930 kubelet[2104]: I0714 23:21:50.623428 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-key-pair" (OuterVolumeSpecName: "goldmane-key-pair") pod "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee"). InnerVolumeSpecName "goldmane-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 14 23:21:50.625930 kubelet[2104]: I0714 23:21:50.623445 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-kube-api-access-8nfbw" (OuterVolumeSpecName: "kube-api-access-8nfbw") pod "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" (UID: "1a21ac09-ca35-4722-b2a3-bce6c2fba7ee"). InnerVolumeSpecName "kube-api-access-8nfbw". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:50.625137 systemd[1]: run-netns-cni\x2d12630aeb\x2d26ba\x2d09c8\x2df041\x2dfdc430291c6d.mount: Deactivated successfully. Jul 14 23:21:50.626157 env[1250]: time="2025-07-14T23:21:50.626131177Z" level=info msg="TearDown network for sandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" successfully" Jul 14 23:21:50.626235 env[1250]: time="2025-07-14T23:21:50.626219964Z" level=info msg="StopPodSandbox for \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" returns successfully" Jul 14 23:21:50.703015 kubelet[2104]: I0714 23:21:50.702892 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-7rz5g\" (UniqueName: \"kubernetes.io/projected/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-kube-api-access-7rz5g\") pod \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\" (UID: \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\") " Jul 14 23:21:50.703015 kubelet[2104]: I0714 23:21:50.702920 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-calico-apiserver-certs\") pod \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\" (UID: \"6e2ec9ce-0970-462d-a8cb-5fe0646db8b4\") " Jul 14 23:21:50.703015 kubelet[2104]: I0714 23:21:50.702966 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-8nfbw\" (UniqueName: \"kubernetes.io/projected/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-kube-api-access-8nfbw\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.703015 kubelet[2104]: I0714 23:21:50.702974 2104 reconciler_common.go:293] "Volume detached for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.703015 kubelet[2104]: I0714 23:21:50.702979 2104 reconciler_common.go:293] "Volume detached for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-goldmane-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.703015 kubelet[2104]: I0714 23:21:50.702986 2104 reconciler_common.go:293] "Volume detached for volume \"config\" (UniqueName: \"kubernetes.io/configmap/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee-config\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.084 [INFO][7377] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.084 [INFO][7377] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" iface="eth0" netns="/var/run/netns/cni-2c7e93d5-cd53-c3b9-b69d-80a6bb6a5c6e" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.084 [INFO][7377] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" iface="eth0" netns="/var/run/netns/cni-2c7e93d5-cd53-c3b9-b69d-80a6bb6a5c6e" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.095 [INFO][7377] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" after=10.68997ms iface="eth0" netns="/var/run/netns/cni-2c7e93d5-cd53-c3b9-b69d-80a6bb6a5c6e" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.095 [INFO][7377] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.095 [INFO][7377] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.409 [INFO][7385] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.416 [INFO][7385] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.614 [INFO][7385] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.714 [INFO][7385] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.714 [INFO][7385] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.715 [INFO][7385] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:50.718447 env[1250]: 2025-07-14 23:21:50.717 [INFO][7377] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:21:50.720888 env[1250]: time="2025-07-14T23:21:50.720861040Z" level=info msg="TearDown network for sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" successfully" Jul 14 23:21:50.720888 env[1250]: time="2025-07-14T23:21:50.720886633Z" level=info msg="StopPodSandbox for \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" returns successfully" Jul 14 23:21:50.730442 kubelet[2104]: I0714 23:21:50.730398 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "6e2ec9ce-0970-462d-a8cb-5fe0646db8b4" (UID: "6e2ec9ce-0970-462d-a8cb-5fe0646db8b4"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 14 23:21:50.733361 kubelet[2104]: I0714 23:21:50.733331 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-kube-api-access-7rz5g" (OuterVolumeSpecName: "kube-api-access-7rz5g") pod "6e2ec9ce-0970-462d-a8cb-5fe0646db8b4" (UID: "6e2ec9ce-0970-462d-a8cb-5fe0646db8b4"). InnerVolumeSpecName "kube-api-access-7rz5g". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:50.764000 audit[7472]: AVC avc: denied { write } for pid=7472 comm="tee" name="fd" dev="proc" ino=71844 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.765000 audit[7480]: AVC avc: denied { write } for pid=7480 comm="tee" name="fd" dev="proc" ino=71847 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.766000 audit[7475]: AVC avc: denied { write } for pid=7475 comm="tee" name="fd" dev="proc" ino=70534 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.766000 audit[7475]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc7bb1a7e9 a2=241 a3=1b6 items=1 ppid=7427 pid=7475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.766000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 14 23:21:50.767000 audit[7477]: AVC avc: denied { write } for pid=7477 comm="tee" name="fd" dev="proc" ino=71853 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.767000 audit[7477]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffebdce67da a2=241 a3=1b6 items=1 ppid=7422 pid=7477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.767000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 14 23:21:50.767000 audit: PATH item=0 name="/dev/fd/63" inode=70527 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.767000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.765000 audit[7480]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdebcff7e9 a2=241 a3=1b6 items=1 ppid=7424 pid=7480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.765000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 14 23:21:50.765000 audit: PATH item=0 name="/dev/fd/63" inode=70528 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.765000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.764000 audit[7472]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffbdca37e9 a2=241 a3=1b6 items=1 ppid=7416 pid=7472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.764000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 14 23:21:50.764000 audit: PATH item=0 name="/dev/fd/63" inode=70525 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.764000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.767000 audit[7470]: AVC avc: denied { write } for pid=7470 comm="tee" name="fd" dev="proc" ino=70540 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.767000 audit[7470]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffef33a7d9 a2=241 a3=1b6 items=1 ppid=7411 pid=7470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.767000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 14 23:21:50.767000 audit: PATH item=0 name="/dev/fd/63" inode=70524 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.767000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.766000 audit: PATH item=0 name="/dev/fd/63" inode=70526 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.766000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.768000 audit[7482]: AVC avc: denied { write } for pid=7482 comm="tee" name="fd" dev="proc" ino=70544 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.768000 audit[7482]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd5f84e7ea a2=241 a3=1b6 items=1 ppid=7420 pid=7482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.768000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 14 23:21:50.768000 audit: PATH item=0 name="/dev/fd/63" inode=71840 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.768000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.769000 audit[7488]: AVC avc: denied { write } for pid=7488 comm="tee" name="fd" dev="proc" ino=70548 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 14 23:21:50.769000 audit[7488]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff3866c7eb a2=241 a3=1b6 items=1 ppid=7410 pid=7488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:50.769000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 14 23:21:50.769000 audit: PATH item=0 name="/dev/fd/63" inode=71841 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 14 23:21:50.769000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 14 23:21:50.788660 kubelet[2104]: I0714 23:21:50.788642 2104 scope.go:117] "RemoveContainer" containerID="9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43" Jul 14 23:21:50.789666 env[1250]: time="2025-07-14T23:21:50.789639752Z" level=info msg="RemoveContainer for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\"" Jul 14 23:21:50.793728 env[1250]: time="2025-07-14T23:21:50.793700612Z" level=info msg="RemoveContainer for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" returns successfully" Jul 14 23:21:50.794787 kubelet[2104]: I0714 23:21:50.794768 2104 scope.go:117] "RemoveContainer" containerID="35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5" Jul 14 23:21:50.802517 env[1250]: time="2025-07-14T23:21:50.802480392Z" level=info msg="RemoveContainer for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\"" Jul 14 23:21:50.803532 kubelet[2104]: I0714 23:21:50.803516 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-f5pkz\" (UniqueName: \"kubernetes.io/projected/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-kube-api-access-f5pkz\") pod \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\" (UID: \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\") " Jul 14 23:21:50.803604 kubelet[2104]: I0714 23:21:50.803541 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-ca-bundle\") pod \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\" (UID: \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\") " Jul 14 23:21:50.803604 kubelet[2104]: I0714 23:21:50.803554 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-backend-key-pair\") pod \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\" (UID: \"681c3e5d-7e9c-4690-8f31-b8e3038ba3d7\") " Jul 14 23:21:50.803604 kubelet[2104]: I0714 23:21:50.803588 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-7rz5g\" (UniqueName: \"kubernetes.io/projected/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-kube-api-access-7rz5g\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.803604 kubelet[2104]: I0714 23:21:50.803597 2104 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.805094 kubelet[2104]: I0714 23:21:50.805074 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7" (UID: "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:21:50.806671 systemd[1]: Removed slice kubepods-besteffort-pod6e2ec9ce_0970_462d_a8cb_5fe0646db8b4.slice. Jul 14 23:21:50.806768 systemd[1]: kubepods-besteffort-pod6e2ec9ce_0970_462d_a8cb_5fe0646db8b4.slice: Consumed 1.482s CPU time. Jul 14 23:21:50.807851 systemd[1]: Removed slice kubepods-besteffort-pod1a21ac09_ca35_4722_b2a3_bce6c2fba7ee.slice. Jul 14 23:21:50.807903 systemd[1]: kubepods-besteffort-pod1a21ac09_ca35_4722_b2a3_bce6c2fba7ee.slice: Consumed 2.359s CPU time. Jul 14 23:21:50.809616 env[1250]: time="2025-07-14T23:21:50.809554589Z" level=info msg="RemoveContainer for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" returns successfully" Jul 14 23:21:50.812519 kubelet[2104]: I0714 23:21:50.812501 2104 scope.go:117] "RemoveContainer" containerID="9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43" Jul 14 23:21:50.814499 kubelet[2104]: I0714 23:21:50.814476 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-kube-api-access-f5pkz" (OuterVolumeSpecName: "kube-api-access-f5pkz") pod "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7" (UID: "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7"). InnerVolumeSpecName "kube-api-access-f5pkz". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:50.817166 env[1250]: time="2025-07-14T23:21:50.817095646Z" level=error msg="ContainerStatus for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": not found" Jul 14 23:21:50.817517 kubelet[2104]: E0714 23:21:50.817493 2104 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": not found" containerID="9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43" Jul 14 23:21:50.817567 kubelet[2104]: I0714 23:21:50.817515 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43"} err="failed to get container status \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": rpc error: code = NotFound desc = an error occurred when try to find container \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": not found" Jul 14 23:21:50.817567 kubelet[2104]: I0714 23:21:50.817532 2104 scope.go:117] "RemoveContainer" containerID="35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5" Jul 14 23:21:50.817693 env[1250]: time="2025-07-14T23:21:50.817652437Z" level=error msg="ContainerStatus for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": not found" Jul 14 23:21:50.817758 kubelet[2104]: E0714 23:21:50.817736 2104 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": not found" containerID="35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5" Jul 14 23:21:50.817758 kubelet[2104]: I0714 23:21:50.817749 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5"} err="failed to get container status \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": rpc error: code = NotFound desc = an error occurred when try to find container \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": not found" Jul 14 23:21:50.817758 kubelet[2104]: I0714 23:21:50.817757 2104 scope.go:117] "RemoveContainer" containerID="9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43" Jul 14 23:21:50.817990 env[1250]: time="2025-07-14T23:21:50.817927819Z" level=error msg="ContainerStatus for \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": not found" Jul 14 23:21:50.818036 kubelet[2104]: I0714 23:21:50.818005 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43"} err="failed to get container status \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": rpc error: code = NotFound desc = an error occurred when try to find container \"9c69965c2370f3d5b13d5662e3b41d994cf471d570360fed06b1b6ea0c52dc43\": not found" Jul 14 23:21:50.818036 kubelet[2104]: I0714 23:21:50.818015 2104 scope.go:117] "RemoveContainer" containerID="35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5" Jul 14 23:21:50.818138 env[1250]: time="2025-07-14T23:21:50.818101735Z" level=error msg="ContainerStatus for \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": not found" Jul 14 23:21:50.818217 kubelet[2104]: I0714 23:21:50.818176 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5"} err="failed to get container status \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": rpc error: code = NotFound desc = an error occurred when try to find container \"35f2ae1c0eaa21c5cf2d7b800a493fa4924f392bb582d869b79732d360b2c1a5\": not found" Jul 14 23:21:50.819066 kubelet[2104]: I0714 23:21:50.819050 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7" (UID: "681c3e5d-7e9c-4690-8f31-b8e3038ba3d7"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 14 23:21:50.904238 kubelet[2104]: I0714 23:21:50.904213 2104 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.904384 kubelet[2104]: I0714 23:21:50.904375 2104 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:50.904451 kubelet[2104]: I0714 23:21:50.904443 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-f5pkz\" (UniqueName: \"kubernetes.io/projected/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7-kube-api-access-f5pkz\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:51.114858 systemd[1]: Removed slice kubepods-besteffort-pod681c3e5d_7e9c_4690_8f31_b8e3038ba3d7.slice. Jul 14 23:21:51.453987 systemd[1]: run-netns-cni\x2d2c7e93d5\x2dcd53\x2dc3b9\x2db69d\x2d80a6bb6a5c6e.mount: Deactivated successfully. Jul 14 23:21:51.454045 systemd[1]: var-lib-kubelet-pods-681c3e5d\x2d7e9c\x2d4690\x2d8f31\x2db8e3038ba3d7-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2df5pkz.mount: Deactivated successfully. Jul 14 23:21:51.454084 systemd[1]: var-lib-kubelet-pods-681c3e5d\x2d7e9c\x2d4690\x2d8f31\x2db8e3038ba3d7-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 14 23:21:51.454120 systemd[1]: var-lib-kubelet-pods-6e2ec9ce\x2d0970\x2d462d\x2da8cb\x2d5fe0646db8b4-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 14 23:21:51.454156 systemd[1]: var-lib-kubelet-pods-6e2ec9ce\x2d0970\x2d462d\x2da8cb\x2d5fe0646db8b4-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d7rz5g.mount: Deactivated successfully. Jul 14 23:21:51.804378 systemd[1]: run-containerd-runc-k8s.io-7b3e3b787edfc14b7de343ab13c108e52694792216a861fe161e1883f5f992ef-runc.JVwtmV.mount: Deactivated successfully. Jul 14 23:21:51.885013 kubelet[2104]: I0714 23:21:51.884984 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1a21ac09-ca35-4722-b2a3-bce6c2fba7ee" path="/var/lib/kubelet/pods/1a21ac09-ca35-4722-b2a3-bce6c2fba7ee/volumes" Jul 14 23:21:51.907048 kubelet[2104]: I0714 23:21:51.907017 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="681c3e5d-7e9c-4690-8f31-b8e3038ba3d7" path="/var/lib/kubelet/pods/681c3e5d-7e9c-4690-8f31-b8e3038ba3d7/volumes" Jul 14 23:21:51.934214 kubelet[2104]: I0714 23:21:51.934073 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="6e2ec9ce-0970-462d-a8cb-5fe0646db8b4" path="/var/lib/kubelet/pods/6e2ec9ce-0970-462d-a8cb-5fe0646db8b4/volumes" Jul 14 23:21:52.764589 kubelet[2104]: I0714 23:21:52.764564 2104 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 14 23:21:52.764749 kubelet[2104]: I0714 23:21:52.764740 2104 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 14 23:21:53.843075 systemd[1]: cri-containerd-e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964.scope: Deactivated successfully. Jul 14 23:21:53.843276 systemd[1]: cri-containerd-e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964.scope: Consumed 1.035s CPU time. Jul 14 23:21:53.843546 systemd[1]: cri-containerd-5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569.scope: Deactivated successfully. Jul 14 23:21:53.846525 kernel: kauditd_printk_skb: 172 callbacks suppressed Jul 14 23:21:53.847132 kernel: audit: type=1334 audit(1752535313.841:1820): prog-id=212 op=UNLOAD Jul 14 23:21:53.848456 kernel: audit: type=1334 audit(1752535313.842:1821): prog-id=192 op=UNLOAD Jul 14 23:21:53.848490 kernel: audit: type=1334 audit(1752535313.846:1822): prog-id=215 op=UNLOAD Jul 14 23:21:53.841000 audit: BPF prog-id=212 op=UNLOAD Jul 14 23:21:53.842000 audit: BPF prog-id=192 op=UNLOAD Jul 14 23:21:53.846000 audit: BPF prog-id=215 op=UNLOAD Jul 14 23:21:53.846000 audit: BPF prog-id=195 op=UNLOAD Jul 14 23:21:53.850230 kernel: audit: type=1334 audit(1752535313.846:1823): prog-id=195 op=UNLOAD Jul 14 23:21:53.863310 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964-rootfs.mount: Deactivated successfully. Jul 14 23:21:53.864520 env[1250]: time="2025-07-14T23:21:53.864485934Z" level=info msg="shim disconnected" id=e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964 Jul 14 23:21:53.864813 env[1250]: time="2025-07-14T23:21:53.864799841Z" level=warning msg="cleaning up after shim disconnected" id=e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964 namespace=k8s.io Jul 14 23:21:53.864912 env[1250]: time="2025-07-14T23:21:53.864901586Z" level=info msg="cleaning up dead shim" Jul 14 23:21:53.867103 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569-rootfs.mount: Deactivated successfully. Jul 14 23:21:53.867803 env[1250]: time="2025-07-14T23:21:53.867779573Z" level=info msg="shim disconnected" id=5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569 Jul 14 23:21:53.867853 env[1250]: time="2025-07-14T23:21:53.867803992Z" level=warning msg="cleaning up after shim disconnected" id=5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569 namespace=k8s.io Jul 14 23:21:53.867853 env[1250]: time="2025-07-14T23:21:53.867810000Z" level=info msg="cleaning up dead shim" Jul 14 23:21:53.872960 env[1250]: time="2025-07-14T23:21:53.872940190Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7598 runtime=io.containerd.runc.v2\n" Jul 14 23:21:53.875724 env[1250]: time="2025-07-14T23:21:53.875701374Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7599 runtime=io.containerd.runc.v2\n" Jul 14 23:21:53.919666 env[1250]: time="2025-07-14T23:21:53.919640426Z" level=info msg="StopContainer for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" returns successfully" Jul 14 23:21:53.919845 env[1250]: time="2025-07-14T23:21:53.919745266Z" level=info msg="StopContainer for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" returns successfully" Jul 14 23:21:53.920173 env[1250]: time="2025-07-14T23:21:53.920159886Z" level=info msg="StopPodSandbox for \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\"" Jul 14 23:21:53.920258 env[1250]: time="2025-07-14T23:21:53.920245203Z" level=info msg="Container to stop \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:53.921763 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4-shm.mount: Deactivated successfully. Jul 14 23:21:53.923866 env[1250]: time="2025-07-14T23:21:53.921837795Z" level=info msg="StopPodSandbox for \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\"" Jul 14 23:21:53.923866 env[1250]: time="2025-07-14T23:21:53.922061953Z" level=info msg="Container to stop \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 14 23:21:53.923355 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64-shm.mount: Deactivated successfully. Jul 14 23:21:53.952000 audit: BPF prog-id=173 op=UNLOAD Jul 14 23:21:53.953926 systemd[1]: cri-containerd-1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64.scope: Deactivated successfully. Jul 14 23:21:53.956436 kernel: audit: type=1334 audit(1752535313.952:1824): prog-id=173 op=UNLOAD Jul 14 23:21:53.957000 audit: BPF prog-id=176 op=UNLOAD Jul 14 23:21:53.960430 kernel: audit: type=1334 audit(1752535313.957:1825): prog-id=176 op=UNLOAD Jul 14 23:21:53.961000 audit: BPF prog-id=208 op=UNLOAD Jul 14 23:21:53.964860 kernel: audit: type=1334 audit(1752535313.961:1826): prog-id=208 op=UNLOAD Jul 14 23:21:53.962523 systemd[1]: cri-containerd-50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4.scope: Deactivated successfully. Jul 14 23:21:53.967000 audit: BPF prog-id=211 op=UNLOAD Jul 14 23:21:53.970429 kernel: audit: type=1334 audit(1752535313.967:1827): prog-id=211 op=UNLOAD Jul 14 23:21:53.978872 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64-rootfs.mount: Deactivated successfully. Jul 14 23:21:53.979691 env[1250]: time="2025-07-14T23:21:53.979644049Z" level=info msg="shim disconnected" id=1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64 Jul 14 23:21:53.979745 env[1250]: time="2025-07-14T23:21:53.979692921Z" level=warning msg="cleaning up after shim disconnected" id=1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64 namespace=k8s.io Jul 14 23:21:53.979745 env[1250]: time="2025-07-14T23:21:53.979699633Z" level=info msg="cleaning up dead shim" Jul 14 23:21:53.988537 env[1250]: time="2025-07-14T23:21:53.988504767Z" level=info msg="shim disconnected" id=50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4 Jul 14 23:21:53.988537 env[1250]: time="2025-07-14T23:21:53.988535053Z" level=warning msg="cleaning up after shim disconnected" id=50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4 namespace=k8s.io Jul 14 23:21:53.988537 env[1250]: time="2025-07-14T23:21:53.988541324Z" level=info msg="cleaning up dead shim" Jul 14 23:21:53.991726 env[1250]: time="2025-07-14T23:21:53.991701723Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7658 runtime=io.containerd.runc.v2\n" Jul 14 23:21:53.996275 env[1250]: time="2025-07-14T23:21:53.996248556Z" level=warning msg="cleanup warnings time=\"2025-07-14T23:21:53Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7667 runtime=io.containerd.runc.v2\n" Jul 14 23:21:54.131766 systemd-networkd[1061]: cali2061ca1db2b: Link DOWN Jul 14 23:21:54.131771 systemd-networkd[1061]: cali2061ca1db2b: Lost carrier Jul 14 23:21:54.139672 systemd-networkd[1061]: cali206934f96fa: Link DOWN Jul 14 23:21:54.139676 systemd-networkd[1061]: cali206934f96fa: Lost carrier Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.129 [INFO][7703] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.131 [INFO][7703] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" iface="eth0" netns="/var/run/netns/cni-78536ef2-c34c-92ab-d3d0-20c1d6768dba" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.131 [INFO][7703] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" iface="eth0" netns="/var/run/netns/cni-78536ef2-c34c-92ab-d3d0-20c1d6768dba" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.141 [INFO][7703] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" after=10.57008ms iface="eth0" netns="/var/run/netns/cni-78536ef2-c34c-92ab-d3d0-20c1d6768dba" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.141 [INFO][7703] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.141 [INFO][7703] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.166 [INFO][7719] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.168 [INFO][7719] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.168 [INFO][7719] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.204 [INFO][7719] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.204 [INFO][7719] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.206 [INFO][7719] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:54.210256 env[1250]: 2025-07-14 23:21:54.208 [INFO][7703] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:21:54.210705 env[1250]: time="2025-07-14T23:21:54.210446844Z" level=info msg="TearDown network for sandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" successfully" Jul 14 23:21:54.210705 env[1250]: time="2025-07-14T23:21:54.210469724Z" level=info msg="StopPodSandbox for \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" returns successfully" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.137 [INFO][7704] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.138 [INFO][7704] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" iface="eth0" netns="/var/run/netns/cni-ecb0711a-4b60-cb58-1eae-8a1938b31541" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.138 [INFO][7704] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" iface="eth0" netns="/var/run/netns/cni-ecb0711a-4b60-cb58-1eae-8a1938b31541" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.149 [INFO][7704] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" after=11.428135ms iface="eth0" netns="/var/run/netns/cni-ecb0711a-4b60-cb58-1eae-8a1938b31541" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.149 [INFO][7704] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.149 [INFO][7704] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.187 [INFO][7725] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.187 [INFO][7725] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.206 [INFO][7725] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.300 [INFO][7725] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.300 [INFO][7725] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.302 [INFO][7725] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:21:54.305347 env[1250]: 2025-07-14 23:21:54.304 [INFO][7704] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:21:54.305737 env[1250]: time="2025-07-14T23:21:54.305536665Z" level=info msg="TearDown network for sandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" successfully" Jul 14 23:21:54.305737 env[1250]: time="2025-07-14T23:21:54.305561140Z" level=info msg="StopPodSandbox for \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" returns successfully" Jul 14 23:21:54.321346 kubelet[2104]: I0714 23:21:54.321318 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-v6psv\" (UniqueName: \"kubernetes.io/projected/68c74c57-331c-447e-bf00-1d922c415b91-kube-api-access-v6psv\") pod \"68c74c57-331c-447e-bf00-1d922c415b91\" (UID: \"68c74c57-331c-447e-bf00-1d922c415b91\") " Jul 14 23:21:54.321346 kubelet[2104]: I0714 23:21:54.321347 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/68c74c57-331c-447e-bf00-1d922c415b91-config-volume\") pod \"68c74c57-331c-447e-bf00-1d922c415b91\" (UID: \"68c74c57-331c-447e-bf00-1d922c415b91\") " Jul 14 23:21:54.322435 kubelet[2104]: I0714 23:21:54.322404 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/68c74c57-331c-447e-bf00-1d922c415b91-config-volume" (OuterVolumeSpecName: "config-volume") pod "68c74c57-331c-447e-bf00-1d922c415b91" (UID: "68c74c57-331c-447e-bf00-1d922c415b91"). InnerVolumeSpecName "config-volume". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:21:54.324804 kubelet[2104]: I0714 23:21:54.324773 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/68c74c57-331c-447e-bf00-1d922c415b91-kube-api-access-v6psv" (OuterVolumeSpecName: "kube-api-access-v6psv") pod "68c74c57-331c-447e-bf00-1d922c415b91" (UID: "68c74c57-331c-447e-bf00-1d922c415b91"). InnerVolumeSpecName "kube-api-access-v6psv". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:54.422107 kubelet[2104]: I0714 23:21:54.422019 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-config-volume\") pod \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\" (UID: \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\") " Jul 14 23:21:54.422107 kubelet[2104]: I0714 23:21:54.422058 2104 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-j62hr\" (UniqueName: \"kubernetes.io/projected/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-kube-api-access-j62hr\") pod \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\" (UID: \"65aa8c25-c100-4c4d-b765-2e9deaf1c86c\") " Jul 14 23:21:54.422107 kubelet[2104]: I0714 23:21:54.422105 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-v6psv\" (UniqueName: \"kubernetes.io/projected/68c74c57-331c-447e-bf00-1d922c415b91-kube-api-access-v6psv\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:54.422284 kubelet[2104]: I0714 23:21:54.422115 2104 reconciler_common.go:293] "Volume detached for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/68c74c57-331c-447e-bf00-1d922c415b91-config-volume\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:54.437647 kubelet[2104]: I0714 23:21:54.437568 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-config-volume" (OuterVolumeSpecName: "config-volume") pod "65aa8c25-c100-4c4d-b765-2e9deaf1c86c" (UID: "65aa8c25-c100-4c4d-b765-2e9deaf1c86c"). InnerVolumeSpecName "config-volume". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 14 23:21:54.437647 kubelet[2104]: I0714 23:21:54.437624 2104 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-kube-api-access-j62hr" (OuterVolumeSpecName: "kube-api-access-j62hr") pod "65aa8c25-c100-4c4d-b765-2e9deaf1c86c" (UID: "65aa8c25-c100-4c4d-b765-2e9deaf1c86c"). InnerVolumeSpecName "kube-api-access-j62hr". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 14 23:21:54.523122 kubelet[2104]: I0714 23:21:54.523078 2104 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-j62hr\" (UniqueName: \"kubernetes.io/projected/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-kube-api-access-j62hr\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:54.523122 kubelet[2104]: I0714 23:21:54.523105 2104 reconciler_common.go:293] "Volume detached for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/65aa8c25-c100-4c4d-b765-2e9deaf1c86c-config-volume\") on node \"localhost\" DevicePath \"\"" Jul 14 23:21:54.615000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.103:22-139.178.89.65:37674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:54.617041 systemd[1]: Started sshd@19-139.178.70.103:22-139.178.89.65:37674.service. Jul 14 23:21:54.620433 kernel: audit: type=1130 audit(1752535314.615:1828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.103:22-139.178.89.65:37674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:54.721000 audit[7752]: USER_ACCT pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:54.723482 sshd[7752]: Accepted publickey for core from 139.178.89.65 port 37674 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:21:54.727465 kernel: audit: type=1101 audit(1752535314.721:1829): pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:54.726000 audit[7752]: CRED_ACQ pid=7752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:54.726000 audit[7752]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffa961e350 a2=3 a3=0 items=0 ppid=1 pid=7752 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:21:54.726000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:21:54.740830 sshd[7752]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:21:54.750699 systemd[1]: Started session-22.scope. Jul 14 23:21:54.751477 systemd-logind[1242]: New session 22 of user core. Jul 14 23:21:54.756000 audit[7752]: USER_START pid=7752 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:54.757000 audit[7754]: CRED_ACQ pid=7754 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:54.796655 kubelet[2104]: I0714 23:21:54.796635 2104 scope.go:117] "RemoveContainer" containerID="5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569" Jul 14 23:21:54.799088 systemd[1]: Removed slice kubepods-burstable-pod68c74c57_331c_447e_bf00_1d922c415b91.slice. Jul 14 23:21:54.799952 env[1250]: time="2025-07-14T23:21:54.799707474Z" level=info msg="RemoveContainer for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\"" Jul 14 23:21:54.801952 env[1250]: time="2025-07-14T23:21:54.801932115Z" level=info msg="RemoveContainer for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" returns successfully" Jul 14 23:21:54.802799 kubelet[2104]: I0714 23:21:54.802779 2104 scope.go:117] "RemoveContainer" containerID="5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569" Jul 14 23:21:54.803027 env[1250]: time="2025-07-14T23:21:54.802973849Z" level=error msg="ContainerStatus for \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\": not found" Jul 14 23:21:54.803583 kubelet[2104]: E0714 23:21:54.803431 2104 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\": not found" containerID="5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569" Jul 14 23:21:54.803583 kubelet[2104]: I0714 23:21:54.803449 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569"} err="failed to get container status \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\": rpc error: code = NotFound desc = an error occurred when try to find container \"5a73d1eb247a609a8e4ab69a2b4ce79ed023c4243c79be9f0167f47ce21a3569\": not found" Jul 14 23:21:54.803583 kubelet[2104]: I0714 23:21:54.803463 2104 scope.go:117] "RemoveContainer" containerID="e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964" Jul 14 23:21:54.804031 systemd[1]: Removed slice kubepods-burstable-pod65aa8c25_c100_4c4d_b765_2e9deaf1c86c.slice. Jul 14 23:21:54.804091 systemd[1]: kubepods-burstable-pod65aa8c25_c100_4c4d_b765_2e9deaf1c86c.slice: Consumed 1.058s CPU time. Jul 14 23:21:54.805207 env[1250]: time="2025-07-14T23:21:54.805191997Z" level=info msg="RemoveContainer for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\"" Jul 14 23:21:54.807224 env[1250]: time="2025-07-14T23:21:54.807208080Z" level=info msg="RemoveContainer for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" returns successfully" Jul 14 23:21:54.807647 kubelet[2104]: I0714 23:21:54.807373 2104 scope.go:117] "RemoveContainer" containerID="e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964" Jul 14 23:21:54.809102 env[1250]: time="2025-07-14T23:21:54.809054076Z" level=error msg="ContainerStatus for \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\": not found" Jul 14 23:21:54.809286 kubelet[2104]: E0714 23:21:54.809270 2104 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\": not found" containerID="e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964" Jul 14 23:21:54.809337 kubelet[2104]: I0714 23:21:54.809288 2104 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964"} err="failed to get container status \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\": rpc error: code = NotFound desc = an error occurred when try to find container \"e844789e1dc963446e96b17a747f4315cf116eb7b7c7c3a8eb568ff8ce471964\": not found" Jul 14 23:21:54.863366 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4-rootfs.mount: Deactivated successfully. Jul 14 23:21:54.863474 systemd[1]: run-netns-cni\x2decb0711a\x2d4b60\x2dcb58\x2d1eae\x2d8a1938b31541.mount: Deactivated successfully. Jul 14 23:21:54.863512 systemd[1]: run-netns-cni\x2d78536ef2\x2dc34c\x2d92ab\x2dd3d0\x2d20c1d6768dba.mount: Deactivated successfully. Jul 14 23:21:54.863547 systemd[1]: var-lib-kubelet-pods-68c74c57\x2d331c\x2d447e\x2dbf00\x2d1d922c415b91-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dv6psv.mount: Deactivated successfully. Jul 14 23:21:54.863586 systemd[1]: var-lib-kubelet-pods-65aa8c25\x2dc100\x2d4c4d\x2db765\x2d2e9deaf1c86c-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dj62hr.mount: Deactivated successfully. Jul 14 23:21:55.263324 sshd[7752]: pam_unix(sshd:session): session closed for user core Jul 14 23:21:55.263000 audit[7752]: USER_END pid=7752 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:55.263000 audit[7752]: CRED_DISP pid=7752 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:21:55.264000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.103:22-139.178.89.65:37674 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:21:55.265491 systemd[1]: sshd@19-139.178.70.103:22-139.178.89.65:37674.service: Deactivated successfully. Jul 14 23:21:55.266267 systemd[1]: session-22.scope: Deactivated successfully. Jul 14 23:21:55.266299 systemd-logind[1242]: Session 22 logged out. Waiting for processes to exit. Jul 14 23:21:55.266966 systemd-logind[1242]: Removed session 22. Jul 14 23:21:55.880089 kubelet[2104]: I0714 23:21:55.880041 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="65aa8c25-c100-4c4d-b765-2e9deaf1c86c" path="/var/lib/kubelet/pods/65aa8c25-c100-4c4d-b765-2e9deaf1c86c/volumes" Jul 14 23:21:55.881274 kubelet[2104]: I0714 23:21:55.881239 2104 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="68c74c57-331c-447e-bf00-1d922c415b91" path="/var/lib/kubelet/pods/68c74c57-331c-447e-bf00-1d922c415b91/volumes" Jul 14 23:21:56.926000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:56.926000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c004e91000 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:21:56.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:21:56.927000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:56.927000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c013459b00 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:21:56.927000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:21:56.932000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:56.932000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c00775ad20 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:21:56.932000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:21:56.933000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:56.933000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c004e91020 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:21:56.933000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:21:56.933000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:56.933000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=44 a1=c00775ae40 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:21:56.933000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:21:56.935000 audit[1971]: AVC avc: denied { watch } for pid=1971 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:21:56.935000 audit[1971]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c013459b30 a2=fc6 a3=0 items=0 ppid=1858 pid=1971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c13,c770 key=(null) Jul 14 23:21:56.935000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313033002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 14 23:21:59.417507 update_engine[1244]: I0714 23:21:59.417440 1244 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:21:59.418098 update_engine[1244]: I0714 23:21:59.417956 1244 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:21:59.418098 update_engine[1244]: E0714 23:21:59.418049 1244 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:21:59.418155 update_engine[1244]: I0714 23:21:59.418112 1244 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 14 23:21:59.419063 update_engine[1244]: I0714 23:21:59.419044 1244 omaha_request_action.cc:621] Omaha request response: Jul 14 23:21:59.419293 update_engine[1244]: E0714 23:21:59.419279 1244 omaha_request_action.cc:640] Omaha request network transfer failed. Jul 14 23:21:59.419653 update_engine[1244]: I0714 23:21:59.419613 1244 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Jul 14 23:21:59.419653 update_engine[1244]: I0714 23:21:59.419647 1244 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 14 23:21:59.419653 update_engine[1244]: I0714 23:21:59.419651 1244 update_attempter.cc:306] Processing Done. Jul 14 23:21:59.420512 update_engine[1244]: E0714 23:21:59.420481 1244 update_attempter.cc:619] Update failed. Jul 14 23:21:59.420512 update_engine[1244]: I0714 23:21:59.420491 1244 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Jul 14 23:21:59.420512 update_engine[1244]: I0714 23:21:59.420495 1244 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Jul 14 23:21:59.420512 update_engine[1244]: I0714 23:21:59.420498 1244 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Jul 14 23:21:59.423327 update_engine[1244]: I0714 23:21:59.423305 1244 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 14 23:21:59.425557 update_engine[1244]: I0714 23:21:59.425527 1244 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 14 23:21:59.425557 update_engine[1244]: I0714 23:21:59.425547 1244 omaha_request_action.cc:271] Request: Jul 14 23:21:59.425557 update_engine[1244]: Jul 14 23:21:59.425557 update_engine[1244]: Jul 14 23:21:59.425557 update_engine[1244]: Jul 14 23:21:59.425557 update_engine[1244]: Jul 14 23:21:59.425557 update_engine[1244]: Jul 14 23:21:59.425557 update_engine[1244]: Jul 14 23:21:59.425557 update_engine[1244]: I0714 23:21:59.425554 1244 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425701 1244 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 14 23:21:59.425895 update_engine[1244]: E0714 23:21:59.425765 1244 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425825 1244 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425832 1244 omaha_request_action.cc:621] Omaha request response: Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425835 1244 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425838 1244 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425843 1244 update_attempter.cc:306] Processing Done. Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425845 1244 update_attempter.cc:310] Error event sent. Jul 14 23:21:59.425895 update_engine[1244]: I0714 23:21:59.425860 1244 update_check_scheduler.cc:74] Next update check in 45m29s Jul 14 23:21:59.490470 locksmithd[1292]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Jul 14 23:21:59.490937 locksmithd[1292]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Jul 14 23:22:00.266436 systemd[1]: Started sshd@20-139.178.70.103:22-139.178.89.65:46866.service. Jul 14 23:22:00.265000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.103:22-139.178.89.65:46866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:00.267706 kernel: kauditd_printk_skb: 27 callbacks suppressed Jul 14 23:22:00.267745 kernel: audit: type=1130 audit(1752535320.265:1843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.103:22-139.178.89.65:46866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:00.366000 audit[7886]: USER_ACCT pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.369000 audit[7886]: CRED_ACQ pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.372647 sshd[7886]: Accepted publickey for core from 139.178.89.65 port 46866 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:00.374347 kernel: audit: type=1101 audit(1752535320.366:1844): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.374381 kernel: audit: type=1103 audit(1752535320.369:1845): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.374398 kernel: audit: type=1006 audit(1752535320.369:1846): pid=7886 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 14 23:22:00.369000 audit[7886]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff57fde1b0 a2=3 a3=0 items=0 ppid=1 pid=7886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:00.379425 kernel: audit: type=1300 audit(1752535320.369:1846): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff57fde1b0 a2=3 a3=0 items=0 ppid=1 pid=7886 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:00.369000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:00.380736 kernel: audit: type=1327 audit(1752535320.369:1846): proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:00.387423 sshd[7886]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:00.394929 systemd-logind[1242]: New session 23 of user core. Jul 14 23:22:00.395466 systemd[1]: Started session-23.scope. Jul 14 23:22:00.397000 audit[7886]: USER_START pid=7886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.398000 audit[7888]: CRED_ACQ pid=7888 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.405300 kernel: audit: type=1105 audit(1752535320.397:1847): pid=7886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.405404 kernel: audit: type=1103 audit(1752535320.398:1848): pid=7888 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.693917 sshd[7886]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:00.693000 audit[7886]: USER_END pid=7886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.696198 systemd[1]: sshd@20-139.178.70.103:22-139.178.89.65:46866.service: Deactivated successfully. Jul 14 23:22:00.696896 systemd[1]: session-23.scope: Deactivated successfully. Jul 14 23:22:00.699264 systemd-logind[1242]: Session 23 logged out. Waiting for processes to exit. Jul 14 23:22:00.699687 kernel: audit: type=1106 audit(1752535320.693:1849): pid=7886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.699724 kernel: audit: type=1104 audit(1752535320.693:1850): pid=7886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.693000 audit[7886]: CRED_DISP pid=7886 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:00.694000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.103:22-139.178.89.65:46866 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:00.702828 systemd-logind[1242]: Removed session 23. Jul 14 23:22:03.581000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:22:03.581000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00072cc40 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:03.581000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:03.582000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8224 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 14 23:22:03.582000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0008dce60 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:03.582000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:03.593000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:22:03.593000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009d8300 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:03.593000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:03.594000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:22:03.594000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ba8ac0 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:03.594000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:22:03.594000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0009d8520 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:03.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:03.594000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:03.595000 audit[6706]: AVC avc: denied { watch } for pid=6706 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 14 23:22:03.595000 audit[6706]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0009d8580 a2=fc6 a3=0 items=0 ppid=1798 pid=6706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:03.595000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:04.874000 audit[7980]: AVC avc: denied { execute } for pid=7980 comm="kube-controller" name="uds" dev="sda9" ino=8378 scontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 14 23:22:04.874000 audit[7980]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c001262230 a1=c00260cab0 a2=c002571600 a3=0 items=0 ppid=6706 pid=7980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c604,c693 key=(null) Jul 14 23:22:04.874000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 14 23:22:05.311000 audit[8017]: NETFILTER_CFG table=filter:151 family=2 entries=9 op=nft_register_rule pid=8017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.314330 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 14 23:22:05.314379 kernel: audit: type=1325 audit(1752535325.311:1859): table=filter:151 family=2 entries=9 op=nft_register_rule pid=8017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.311000 audit[8017]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe74201ef0 a2=0 a3=7ffe74201edc items=0 ppid=2207 pid=8017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.320216 kernel: audit: type=1300 audit(1752535325.311:1859): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe74201ef0 a2=0 a3=7ffe74201edc items=0 ppid=2207 pid=8017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.311000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.322232 kernel: audit: type=1327 audit(1752535325.311:1859): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.323000 audit[8017]: NETFILTER_CFG table=nat:152 family=2 entries=103 op=nft_register_chain pid=8017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.323000 audit[8017]: SYSCALL arch=c000003e syscall=46 success=yes exit=35284 a0=3 a1=7ffe74201ef0 a2=0 a3=7ffe74201edc items=0 ppid=2207 pid=8017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.331760 kernel: audit: type=1325 audit(1752535325.323:1860): table=nat:152 family=2 entries=103 op=nft_register_chain pid=8017 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.331849 kernel: audit: type=1300 audit(1752535325.323:1860): arch=c000003e syscall=46 success=yes exit=35284 a0=3 a1=7ffe74201ef0 a2=0 a3=7ffe74201edc items=0 ppid=2207 pid=8017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.331871 kernel: audit: type=1327 audit(1752535325.323:1860): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.323000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.347000 audit[8019]: NETFILTER_CFG table=filter:153 family=2 entries=8 op=nft_register_rule pid=8019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.358555 kernel: audit: type=1325 audit(1752535325.347:1861): table=filter:153 family=2 entries=8 op=nft_register_rule pid=8019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.358593 kernel: audit: type=1300 audit(1752535325.347:1861): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcc3c428f0 a2=0 a3=7ffcc3c428dc items=0 ppid=2207 pid=8019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.358611 kernel: audit: type=1327 audit(1752535325.347:1861): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.347000 audit[8019]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffcc3c428f0 a2=0 a3=7ffcc3c428dc items=0 ppid=2207 pid=8019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.347000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.362000 audit[8019]: NETFILTER_CFG table=nat:154 family=2 entries=26 op=nft_register_rule pid=8019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.362000 audit[8019]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffcc3c428f0 a2=0 a3=7ffcc3c428dc items=0 ppid=2207 pid=8019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.362000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:05.366437 kernel: audit: type=1325 audit(1752535325.362:1862): table=nat:154 family=2 entries=26 op=nft_register_rule pid=8019 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.586000 audit: BPF prog-id=249 op=LOAD Jul 14 23:22:05.586000 audit[8036]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe3e83a190 a2=98 a3=1fffffffffffffff items=0 ppid=8020 pid=8036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.586000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:22:05.587000 audit: BPF prog-id=249 op=UNLOAD Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit: BPF prog-id=250 op=LOAD Jul 14 23:22:05.588000 audit[8036]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe3e83a070 a2=94 a3=3 items=0 ppid=8020 pid=8036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.588000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:22:05.588000 audit: BPF prog-id=250 op=UNLOAD Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { bpf } for pid=8036 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit: BPF prog-id=251 op=LOAD Jul 14 23:22:05.588000 audit[8036]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe3e83a0b0 a2=94 a3=7ffe3e83a290 items=0 ppid=8020 pid=8036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.588000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:22:05.588000 audit: BPF prog-id=251 op=UNLOAD Jul 14 23:22:05.588000 audit[8036]: AVC avc: denied { perfmon } for pid=8036 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.588000 audit[8036]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7ffe3e83a180 a2=50 a3=a000000085 items=0 ppid=8020 pid=8036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.588000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.599000 audit: BPF prog-id=252 op=LOAD Jul 14 23:22:05.599000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffde731ec80 a2=98 a3=3 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.599000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.599000 audit: BPF prog-id=252 op=UNLOAD Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit: BPF prog-id=253 op=LOAD Jul 14 23:22:05.608000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffde731ea70 a2=94 a3=54428f items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.608000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.608000 audit: BPF prog-id=253 op=UNLOAD Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.608000 audit: BPF prog-id=254 op=LOAD Jul 14 23:22:05.608000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffde731eaa0 a2=94 a3=2 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.608000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.608000 audit: BPF prog-id=254 op=UNLOAD Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit: BPF prog-id=255 op=LOAD Jul 14 23:22:05.685000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffde731e960 a2=94 a3=1 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.685000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.685000 audit: BPF prog-id=255 op=UNLOAD Jul 14 23:22:05.685000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.685000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffde731ea30 a2=50 a3=7ffde731eb10 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.685000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde731e970 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde731e9a0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde731e8b0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde731e9c0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde731e9a0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde731e990 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde731e9c0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde731e9a0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde731e9c0 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffde731e990 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.693000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.693000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffde731ea00 a2=28 a3=0 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.693000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffde731e7b0 a2=50 a3=1 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit: BPF prog-id=256 op=LOAD Jul 14 23:22:05.694000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffde731e7b0 a2=94 a3=5 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.694000 audit: BPF prog-id=256 op=UNLOAD Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffde731e860 a2=50 a3=1 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffde731e980 a2=4 a3=38 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.694000 audit[8037]: AVC avc: denied { confidentiality } for pid=8037 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:22:05.694000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffde731e9d0 a2=94 a3=6 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.694000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { confidentiality } for pid=8037 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:22:05.695000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffde731e180 a2=94 a3=88 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.695000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { perfmon } for pid=8037 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { bpf } for pid=8037 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.695000 audit[8037]: AVC avc: denied { confidentiality } for pid=8037 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:22:05.695000 audit[8037]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffde731e180 a2=94 a3=88 items=0 ppid=8020 pid=8037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.695000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 14 23:22:05.696000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.103:22-139.178.89.65:46878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:05.697240 systemd[1]: Started sshd@21-139.178.70.103:22-139.178.89.65:46878.service. Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.795000 audit: BPF prog-id=257 op=LOAD Jul 14 23:22:05.795000 audit[8042]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccc5bed20 a2=98 a3=1999999999999999 items=0 ppid=8020 pid=8042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.795000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:22:05.796000 audit: BPF prog-id=257 op=UNLOAD Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit: BPF prog-id=258 op=LOAD Jul 14 23:22:05.796000 audit[8042]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccc5bec00 a2=94 a3=ffff items=0 ppid=8020 pid=8042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.796000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:22:05.796000 audit: BPF prog-id=258 op=UNLOAD Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { perfmon } for pid=8042 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit[8042]: AVC avc: denied { bpf } for pid=8042 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.796000 audit: BPF prog-id=259 op=LOAD Jul 14 23:22:05.796000 audit[8042]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffccc5bec40 a2=94 a3=7ffccc5bee20 items=0 ppid=8020 pid=8042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.796000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 14 23:22:05.796000 audit: BPF prog-id=259 op=UNLOAD Jul 14 23:22:05.895473 sshd[8039]: Accepted publickey for core from 139.178.89.65 port 46878 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:05.893000 audit[8039]: USER_ACCT pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:05.898000 audit[8039]: CRED_ACQ pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:05.898000 audit[8039]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffedfcf9dc0 a2=3 a3=0 items=0 ppid=1 pid=8039 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.898000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:05.918648 sshd[8039]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:05.934251 systemd[1]: Started session-24.scope. Jul 14 23:22:05.935196 systemd-logind[1242]: New session 24 of user core. Jul 14 23:22:05.938000 audit[8039]: USER_START pid=8039 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:05.939000 audit[8066]: CRED_ACQ pid=8066 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.953000 audit: BPF prog-id=260 op=LOAD Jul 14 23:22:05.953000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff723d9370 a2=98 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.953000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.954000 audit: BPF prog-id=260 op=UNLOAD Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.956000 audit: BPF prog-id=261 op=LOAD Jul 14 23:22:05.956000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff723d9180 a2=94 a3=54428f items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.956000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit: BPF prog-id=261 op=UNLOAD Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit: BPF prog-id=262 op=LOAD Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff723d91b0 a2=94 a3=2 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit: BPF prog-id=262 op=UNLOAD Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff723d9080 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff723d90b0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff723d8fc0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff723d90d0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff723d90b0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff723d90a0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff723d90d0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff723d90b0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff723d90d0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff723d90a0 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff723d9110 a2=28 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.957000 audit: BPF prog-id=263 op=LOAD Jul 14 23:22:05.957000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff723d8f80 a2=94 a3=0 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.957000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.957000 audit: BPF prog-id=263 op=UNLOAD Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff723d8f70 a2=50 a3=2800 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.958000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff723d8f70 a2=50 a3=2800 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.958000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit: BPF prog-id=264 op=LOAD Jul 14 23:22:05.958000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff723d8790 a2=94 a3=2 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.958000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.958000 audit: BPF prog-id=264 op=UNLOAD Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { perfmon } for pid=8068 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit[8068]: AVC avc: denied { bpf } for pid=8068 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.958000 audit: BPF prog-id=265 op=LOAD Jul 14 23:22:05.958000 audit[8068]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff723d8890 a2=94 a3=30 items=0 ppid=8020 pid=8068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.958000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.964000 audit: BPF prog-id=266 op=LOAD Jul 14 23:22:05.964000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffef5e0a830 a2=98 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.964000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:05.964000 audit: BPF prog-id=266 op=UNLOAD Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit: BPF prog-id=267 op=LOAD Jul 14 23:22:05.965000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffef5e0a620 a2=94 a3=54428f items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.965000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:05.965000 audit: BPF prog-id=267 op=UNLOAD Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:05.965000 audit: BPF prog-id=268 op=LOAD Jul 14 23:22:05.965000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffef5e0a650 a2=94 a3=2 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:05.965000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:05.965000 audit: BPF prog-id=268 op=UNLOAD Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.354000 audit: BPF prog-id=269 op=LOAD Jul 14 23:22:06.354000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffef5e0a510 a2=94 a3=1 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.354000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.355000 audit: BPF prog-id=269 op=UNLOAD Jul 14 23:22:06.355000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.355000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffef5e0a5e0 a2=50 a3=7ffef5e0a6c0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.355000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffef5e0a520 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef5e0a550 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef5e0a460 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffef5e0a570 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffef5e0a550 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffef5e0a540 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffef5e0a570 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef5e0a550 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef5e0a570 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffef5e0a540 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.362000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.362000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffef5e0a5b0 a2=28 a3=0 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.362000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffef5e0a360 a2=50 a3=1 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit: BPF prog-id=270 op=LOAD Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffef5e0a360 a2=94 a3=5 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit: BPF prog-id=270 op=UNLOAD Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffef5e0a410 a2=50 a3=1 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffef5e0a530 a2=4 a3=38 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { confidentiality } for pid=8072 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffef5e0a580 a2=94 a3=6 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { confidentiality } for pid=8072 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffef5e09d30 a2=94 a3=88 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { perfmon } for pid=8072 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { confidentiality } for pid=8072 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffef5e09d30 a2=94 a3=88 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.363000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.363000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffef5e0b760 a2=10 a3=f8f00800 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.363000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.366000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.366000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffef5e0b600 a2=10 a3=3 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.366000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.366000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffef5e0b5a0 a2=10 a3=3 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.366000 audit[8072]: AVC avc: denied { bpf } for pid=8072 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 14 23:22:06.366000 audit[8072]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffef5e0b5a0 a2=10 a3=7 items=0 ppid=8020 pid=8072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.366000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 14 23:22:06.408000 audit: BPF prog-id=265 op=UNLOAD Jul 14 23:22:06.685000 audit[8120]: NETFILTER_CFG table=filter:155 family=2 entries=175 op=nft_register_rule pid=8120 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:22:06.685000 audit[8120]: SYSCALL arch=c000003e syscall=46 success=yes exit=5108 a0=3 a1=7ffc22eb8f40 a2=0 a3=7ffc22eb8f2c items=0 ppid=8020 pid=8120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.685000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:22:06.725000 audit[8120]: NETFILTER_CFG table=filter:156 family=2 entries=30 op=nft_unregister_chain pid=8120 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 14 23:22:06.725000 audit[8120]: SYSCALL arch=c000003e syscall=46 success=yes exit=4128 a0=3 a1=7ffc22eb8f40 a2=0 a3=7ffc22eb8f2c items=0 ppid=8020 pid=8120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:06.725000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 14 23:22:06.776140 sshd[8039]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:06.775000 audit[8039]: USER_END pid=8039 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:06.775000 audit[8039]: CRED_DISP pid=8039 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:06.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.103:22-139.178.89.65:46878 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:06.778286 systemd-logind[1242]: Session 24 logged out. Waiting for processes to exit. Jul 14 23:22:06.779141 systemd[1]: sshd@21-139.178.70.103:22-139.178.89.65:46878.service: Deactivated successfully. Jul 14 23:22:06.779651 systemd[1]: session-24.scope: Deactivated successfully. Jul 14 23:22:06.780397 systemd-logind[1242]: Removed session 24. Jul 14 23:22:11.779458 systemd[1]: Started sshd@22-139.178.70.103:22-139.178.89.65:57082.service. Jul 14 23:22:11.778000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.103:22-139.178.89.65:57082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:11.783241 kernel: kauditd_printk_skb: 529 callbacks suppressed Jul 14 23:22:11.783633 kernel: audit: type=1130 audit(1752535331.778:1972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.103:22-139.178.89.65:57082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:11.836000 audit[8135]: USER_ACCT pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.838474 sshd[8135]: Accepted publickey for core from 139.178.89.65 port 57082 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:11.840000 audit[8135]: CRED_ACQ pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.843882 kernel: audit: type=1101 audit(1752535331.836:1973): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.843944 kernel: audit: type=1103 audit(1752535331.840:1974): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.845974 kernel: audit: type=1006 audit(1752535331.840:1975): pid=8135 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=25 res=1 Jul 14 23:22:11.846040 kernel: audit: type=1300 audit(1752535331.840:1975): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebe7b4ba0 a2=3 a3=0 items=0 ppid=1 pid=8135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:11.840000 audit[8135]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffebe7b4ba0 a2=3 a3=0 items=0 ppid=1 pid=8135 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:11.846251 sshd[8135]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:11.849369 kernel: audit: type=1327 audit(1752535331.840:1975): proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:11.840000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:11.852845 systemd[1]: Started session-25.scope. Jul 14 23:22:11.853749 systemd-logind[1242]: New session 25 of user core. Jul 14 23:22:11.855000 audit[8135]: USER_START pid=8135 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.859000 audit[8137]: CRED_ACQ pid=8137 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.863672 kernel: audit: type=1105 audit(1752535331.855:1976): pid=8135 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:11.863705 kernel: audit: type=1103 audit(1752535331.859:1977): pid=8137 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.011604 sshd[8135]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:12.013000 audit[8135]: USER_END pid=8135 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.018401 systemd[1]: Started sshd@23-139.178.70.103:22-139.178.89.65:57098.service. Jul 14 23:22:12.024017 kernel: audit: type=1106 audit(1752535332.013:1978): pid=8135 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.024051 kernel: audit: type=1130 audit(1752535332.017:1979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.103:22-139.178.89.65:57098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:12.017000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.103:22-139.178.89.65:57098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:12.020000 audit[8135]: CRED_DISP pid=8135 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.021000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.103:22-139.178.89.65:57082 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:12.022677 systemd[1]: sshd@22-139.178.70.103:22-139.178.89.65:57082.service: Deactivated successfully. Jul 14 23:22:12.023127 systemd[1]: session-25.scope: Deactivated successfully. Jul 14 23:22:12.023516 systemd-logind[1242]: Session 25 logged out. Waiting for processes to exit. Jul 14 23:22:12.024028 systemd-logind[1242]: Removed session 25. Jul 14 23:22:12.043000 audit[8146]: USER_ACCT pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.045530 sshd[8146]: Accepted publickey for core from 139.178.89.65 port 57098 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:12.044000 audit[8146]: CRED_ACQ pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.045000 audit[8146]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe44fc6a90 a2=3 a3=0 items=0 ppid=1 pid=8146 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:12.045000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:12.047537 sshd[8146]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:12.050264 systemd-logind[1242]: New session 26 of user core. Jul 14 23:22:12.050830 systemd[1]: Started session-26.scope. Jul 14 23:22:12.052000 audit[8146]: USER_START pid=8146 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.053000 audit[8149]: CRED_ACQ pid=8149 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.550150 sshd[8146]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:12.550000 audit[8146]: USER_END pid=8146 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.550000 audit[8146]: CRED_DISP pid=8146 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.553387 systemd[1]: Started sshd@24-139.178.70.103:22-139.178.89.65:57100.service. Jul 14 23:22:12.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.103:22-139.178.89.65:57100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:12.554430 systemd[1]: sshd@23-139.178.70.103:22-139.178.89.65:57098.service: Deactivated successfully. Jul 14 23:22:12.553000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.103:22-139.178.89.65:57098 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:12.555301 systemd[1]: session-26.scope: Deactivated successfully. Jul 14 23:22:12.555919 systemd-logind[1242]: Session 26 logged out. Waiting for processes to exit. Jul 14 23:22:12.556728 systemd-logind[1242]: Removed session 26. Jul 14 23:22:12.617000 audit[8156]: USER_ACCT pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.619020 sshd[8156]: Accepted publickey for core from 139.178.89.65 port 57100 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:12.618000 audit[8156]: CRED_ACQ pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.618000 audit[8156]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec151eec0 a2=3 a3=0 items=0 ppid=1 pid=8156 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:12.618000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:12.620499 sshd[8156]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:12.624248 systemd-logind[1242]: New session 27 of user core. Jul 14 23:22:12.624884 systemd[1]: Started session-27.scope. Jul 14 23:22:12.626000 audit[8156]: USER_START pid=8156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:12.627000 audit[8159]: CRED_ACQ pid=8159 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.555861 systemd[1]: Started sshd@25-139.178.70.103:22-139.178.89.65:57108.service. Jul 14 23:22:14.561000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.103:22-139.178.89.65:57108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:14.584000 audit[8156]: USER_END pid=8156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.588000 audit[8156]: CRED_DISP pid=8156 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.571839 sshd[8156]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:14.601000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.103:22-139.178.89.65:57100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:14.603232 systemd[1]: sshd@24-139.178.70.103:22-139.178.89.65:57100.service: Deactivated successfully. Jul 14 23:22:14.604133 systemd[1]: session-27.scope: Deactivated successfully. Jul 14 23:22:14.604458 systemd-logind[1242]: Session 27 logged out. Waiting for processes to exit. Jul 14 23:22:14.606010 systemd-logind[1242]: Removed session 27. Jul 14 23:22:14.633000 audit[8173]: NETFILTER_CFG table=filter:157 family=2 entries=8 op=nft_register_rule pid=8173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:14.633000 audit[8173]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffd4ffb0ff0 a2=0 a3=7ffd4ffb0fdc items=0 ppid=2207 pid=8173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:14.633000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:14.636000 audit[8173]: NETFILTER_CFG table=nat:158 family=2 entries=26 op=nft_register_rule pid=8173 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:14.636000 audit[8173]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd4ffb0ff0 a2=0 a3=7ffd4ffb0fdc items=0 ppid=2207 pid=8173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:14.636000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:14.644000 audit[8170]: USER_ACCT pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.646774 sshd[8170]: Accepted publickey for core from 139.178.89.65 port 57108 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:14.645000 audit[8170]: CRED_ACQ pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.646000 audit[8170]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd769c1650 a2=3 a3=0 items=0 ppid=1 pid=8170 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=28 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:14.646000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:14.650063 sshd[8170]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:14.657047 systemd-logind[1242]: New session 28 of user core. Jul 14 23:22:14.657693 systemd[1]: Started session-28.scope. Jul 14 23:22:14.664000 audit[8170]: USER_START pid=8170 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.665000 audit[8175]: NETFILTER_CFG table=filter:159 family=2 entries=20 op=nft_register_rule pid=8175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:14.665000 audit[8175]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff346a9970 a2=0 a3=7fff346a995c items=0 ppid=2207 pid=8175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:14.665000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:14.667000 audit[8176]: CRED_ACQ pid=8176 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:14.670000 audit[8175]: NETFILTER_CFG table=nat:160 family=2 entries=26 op=nft_register_rule pid=8175 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:14.670000 audit[8175]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fff346a9970 a2=0 a3=0 items=0 ppid=2207 pid=8175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:14.670000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:15.774791 sshd[8170]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:15.774000 audit[8170]: USER_END pid=8170 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:15.774000 audit[8170]: CRED_DISP pid=8170 uid=0 auid=500 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:15.776000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.103:22-139.178.89.65:57116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:15.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.103:22-139.178.89.65:57108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:15.777401 systemd[1]: Started sshd@26-139.178.70.103:22-139.178.89.65:57116.service. Jul 14 23:22:15.778817 systemd[1]: sshd@25-139.178.70.103:22-139.178.89.65:57108.service: Deactivated successfully. Jul 14 23:22:15.779290 systemd[1]: session-28.scope: Deactivated successfully. Jul 14 23:22:15.779981 systemd-logind[1242]: Session 28 logged out. Waiting for processes to exit. Jul 14 23:22:15.780671 systemd-logind[1242]: Removed session 28. Jul 14 23:22:15.887000 audit[8184]: USER_ACCT pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:15.889492 sshd[8184]: Accepted publickey for core from 139.178.89.65 port 57116 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:15.889000 audit[8184]: CRED_ACQ pid=8184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:15.889000 audit[8184]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea0725120 a2=3 a3=0 items=0 ppid=1 pid=8184 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:15.889000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:15.898517 sshd[8184]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:15.908685 systemd-logind[1242]: New session 29 of user core. Jul 14 23:22:15.909210 systemd[1]: Started session-29.scope. Jul 14 23:22:15.912000 audit[8184]: USER_START pid=8184 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:15.913000 audit[8187]: CRED_ACQ pid=8187 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:16.026264 sshd[8184]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:16.026000 audit[8184]: USER_END pid=8184 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:16.026000 audit[8184]: CRED_DISP pid=8184 uid=0 auid=500 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:16.027000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.103:22-139.178.89.65:57116 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:16.028860 systemd-logind[1242]: Session 29 logged out. Waiting for processes to exit. Jul 14 23:22:16.028973 systemd[1]: sshd@26-139.178.70.103:22-139.178.89.65:57116.service: Deactivated successfully. Jul 14 23:22:16.029439 systemd[1]: session-29.scope: Deactivated successfully. Jul 14 23:22:16.030261 systemd-logind[1242]: Removed session 29. Jul 14 23:22:20.144000 audit[8204]: NETFILTER_CFG table=filter:161 family=2 entries=20 op=nft_register_rule pid=8204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:20.148886 kernel: kauditd_printk_skb: 57 callbacks suppressed Jul 14 23:22:20.156854 kernel: audit: type=1325 audit(1752535340.144:2021): table=filter:161 family=2 entries=20 op=nft_register_rule pid=8204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:20.157506 kernel: audit: type=1300 audit(1752535340.144:2021): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe7419fef0 a2=0 a3=7ffe7419fedc items=0 ppid=2207 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:20.157543 kernel: audit: type=1327 audit(1752535340.144:2021): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:20.144000 audit[8204]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffe7419fef0 a2=0 a3=7ffe7419fedc items=0 ppid=2207 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:20.144000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:20.192000 audit[8204]: NETFILTER_CFG table=nat:162 family=2 entries=110 op=nft_register_chain pid=8204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:20.212242 kernel: audit: type=1325 audit(1752535340.192:2022): table=nat:162 family=2 entries=110 op=nft_register_chain pid=8204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 14 23:22:20.212303 kernel: audit: type=1300 audit(1752535340.192:2022): arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffe7419fef0 a2=0 a3=7ffe7419fedc items=0 ppid=2207 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:20.212320 kernel: audit: type=1327 audit(1752535340.192:2022): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:20.192000 audit[8204]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffe7419fef0 a2=0 a3=7ffe7419fedc items=0 ppid=2207 pid=8204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:20.192000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 14 23:22:21.027000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.103:22-139.178.89.65:35344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:21.029188 systemd[1]: Started sshd@27-139.178.70.103:22-139.178.89.65:35344.service. Jul 14 23:22:21.033444 kernel: audit: type=1130 audit(1752535341.027:2023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.103:22-139.178.89.65:35344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:21.077000 audit[8207]: USER_ACCT pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.082534 kernel: audit: type=1101 audit(1752535341.077:2024): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.087871 kernel: audit: type=1103 audit(1752535341.081:2025): pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.087901 kernel: audit: type=1006 audit(1752535341.081:2026): pid=8207 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=30 res=1 Jul 14 23:22:21.081000 audit[8207]: CRED_ACQ pid=8207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.087960 sshd[8207]: Accepted publickey for core from 139.178.89.65 port 35344 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:21.083523 sshd[8207]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:21.081000 audit[8207]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe35845f50 a2=3 a3=0 items=0 ppid=1 pid=8207 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:21.081000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:21.089544 systemd-logind[1242]: New session 30 of user core. Jul 14 23:22:21.090024 systemd[1]: Started session-30.scope. Jul 14 23:22:21.092000 audit[8207]: USER_START pid=8207 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.092000 audit[8209]: CRED_ACQ pid=8209 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.207574 sshd[8207]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:21.206000 audit[8207]: USER_END pid=8207 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.206000 audit[8207]: CRED_DISP pid=8207 uid=0 auid=500 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:21.208000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@27-139.178.70.103:22-139.178.89.65:35344 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:21.209310 systemd-logind[1242]: Session 30 logged out. Waiting for processes to exit. Jul 14 23:22:21.209426 systemd[1]: sshd@27-139.178.70.103:22-139.178.89.65:35344.service: Deactivated successfully. Jul 14 23:22:21.209872 systemd[1]: session-30.scope: Deactivated successfully. Jul 14 23:22:21.210359 systemd-logind[1242]: Removed session 30. Jul 14 23:22:26.206986 systemd[1]: Started sshd@28-139.178.70.103:22-139.178.89.65:35356.service. Jul 14 23:22:26.206000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.103:22-139.178.89.65:35356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:26.211231 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 14 23:22:26.211272 kernel: audit: type=1130 audit(1752535346.206:2032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.103:22-139.178.89.65:35356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:26.626000 audit[8221]: USER_ACCT pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.628569 sshd[8221]: Accepted publickey for core from 139.178.89.65 port 35356 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:26.630000 audit[8221]: CRED_ACQ pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.635462 kernel: audit: type=1101 audit(1752535346.626:2033): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.635524 kernel: audit: type=1103 audit(1752535346.630:2034): pid=8221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.636183 sshd[8221]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:26.636460 kernel: audit: type=1006 audit(1752535346.630:2035): pid=8221 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=31 res=1 Jul 14 23:22:26.630000 audit[8221]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff18c2b950 a2=3 a3=0 items=0 ppid=1 pid=8221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:26.643432 kernel: audit: type=1300 audit(1752535346.630:2035): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff18c2b950 a2=3 a3=0 items=0 ppid=1 pid=8221 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:26.643945 systemd-logind[1242]: New session 31 of user core. Jul 14 23:22:26.644541 systemd[1]: Started session-31.scope. Jul 14 23:22:26.630000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:26.647465 kernel: audit: type=1327 audit(1752535346.630:2035): proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:26.647000 audit[8221]: USER_START pid=8221 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.653468 kernel: audit: type=1105 audit(1752535346.647:2036): pid=8221 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.648000 audit[8227]: CRED_ACQ pid=8227 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.657441 kernel: audit: type=1103 audit(1752535346.648:2037): pid=8227 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.781948 sshd[8221]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:26.781000 audit[8221]: USER_END pid=8221 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.783384 systemd[1]: sshd@28-139.178.70.103:22-139.178.89.65:35356.service: Deactivated successfully. Jul 14 23:22:26.781000 audit[8221]: CRED_DISP pid=8221 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.786492 systemd-logind[1242]: Session 31 logged out. Waiting for processes to exit. Jul 14 23:22:26.787150 systemd[1]: session-31.scope: Deactivated successfully. Jul 14 23:22:26.787558 systemd-logind[1242]: Removed session 31. Jul 14 23:22:26.789791 kernel: audit: type=1106 audit(1752535346.781:2038): pid=8221 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.790157 kernel: audit: type=1104 audit(1752535346.781:2039): pid=8221 uid=0 auid=500 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:26.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@28-139.178.70.103:22-139.178.89.65:35356 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:29.493211 kubelet[2104]: I0714 23:22:29.493164 2104 scope.go:117] "RemoveContainer" containerID="6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d" Jul 14 23:22:29.531792 env[1250]: time="2025-07-14T23:22:29.518378825Z" level=info msg="RemoveContainer for \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\"" Jul 14 23:22:29.578140 env[1250]: time="2025-07-14T23:22:29.578106604Z" level=info msg="RemoveContainer for \"6af95c76006e69d33bcbc5232036bf16dd215beffe4a84bbea5b1f8ee570484d\" returns successfully" Jul 14 23:22:29.592810 kubelet[2104]: I0714 23:22:29.592708 2104 scope.go:117] "RemoveContainer" containerID="ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144" Jul 14 23:22:29.597032 env[1250]: time="2025-07-14T23:22:29.597005911Z" level=info msg="RemoveContainer for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\"" Jul 14 23:22:29.599186 env[1250]: time="2025-07-14T23:22:29.599165226Z" level=info msg="RemoveContainer for \"ce5968df445df3574114fdf0745f8e875e1dff7a9c7168f9612c65082e1ae144\" returns successfully" Jul 14 23:22:29.601296 env[1250]: time="2025-07-14T23:22:29.601268446Z" level=info msg="StopPodSandbox for \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\"" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:30.108 [WARNING][8266] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:30.115 [INFO][8266] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:30.116 [INFO][8266] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" iface="eth0" netns="" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:30.116 [INFO][8266] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:30.116 [INFO][8266] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.426 [INFO][8278] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.427 [INFO][8278] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.428 [INFO][8278] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.448 [WARNING][8278] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.448 [INFO][8278] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.449 [INFO][8278] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:31.453783 env[1250]: 2025-07-14 23:22:31.451 [INFO][8266] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.456254 env[1250]: time="2025-07-14T23:22:31.454087467Z" level=info msg="TearDown network for sandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" successfully" Jul 14 23:22:31.456254 env[1250]: time="2025-07-14T23:22:31.454111012Z" level=info msg="StopPodSandbox for \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" returns successfully" Jul 14 23:22:31.456254 env[1250]: time="2025-07-14T23:22:31.454569091Z" level=info msg="RemovePodSandbox for \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\"" Jul 14 23:22:31.456254 env[1250]: time="2025-07-14T23:22:31.454594306Z" level=info msg="Forcibly stopping sandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\"" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.585 [WARNING][8293] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.585 [INFO][8293] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.585 [INFO][8293] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" iface="eth0" netns="" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.585 [INFO][8293] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.585 [INFO][8293] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.621 [INFO][8301] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.625 [INFO][8301] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.625 [INFO][8301] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.644 [WARNING][8301] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.644 [INFO][8301] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" HandleID="k8s-pod-network.be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--zmphk-eth0" Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.645 [INFO][8301] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:31.648926 env[1250]: 2025-07-14 23:22:31.647 [INFO][8293] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42" Jul 14 23:22:31.680570 env[1250]: time="2025-07-14T23:22:31.649077299Z" level=info msg="TearDown network for sandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" successfully" Jul 14 23:22:31.817973 env[1250]: time="2025-07-14T23:22:31.817931529Z" level=info msg="RemovePodSandbox \"be1030fdec88dce1753d2a85ec4e27d10d31ad6c5e3b75b3a6945ff5a8600d42\" returns successfully" Jul 14 23:22:31.818596 env[1250]: time="2025-07-14T23:22:31.818570854Z" level=info msg="StopPodSandbox for \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\"" Jul 14 23:22:31.841000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.103:22-139.178.89.65:53860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:31.949019 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 14 23:22:31.955275 kernel: audit: type=1130 audit(1752535351.841:2041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.103:22-139.178.89.65:53860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:31.842739 systemd[1]: Started sshd@29-139.178.70.103:22-139.178.89.65:53860.service. Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.904 [WARNING][8316] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.904 [INFO][8316] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.904 [INFO][8316] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" iface="eth0" netns="" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.904 [INFO][8316] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.904 [INFO][8316] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.952 [INFO][8325] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.952 [INFO][8325] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.952 [INFO][8325] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.959 [WARNING][8325] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.959 [INFO][8325] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.961 [INFO][8325] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:32.020180 env[1250]: 2025-07-14 23:22:31.963 [INFO][8316] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.020180 env[1250]: time="2025-07-14T23:22:31.964757394Z" level=info msg="TearDown network for sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" successfully" Jul 14 23:22:32.020180 env[1250]: time="2025-07-14T23:22:31.964780676Z" level=info msg="StopPodSandbox for \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" returns successfully" Jul 14 23:22:32.117864 env[1250]: time="2025-07-14T23:22:32.117771353Z" level=info msg="RemovePodSandbox for \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\"" Jul 14 23:22:32.117864 env[1250]: time="2025-07-14T23:22:32.117800723Z" level=info msg="Forcibly stopping sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\"" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.154 [WARNING][8340] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" WorkloadEndpoint="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.154 [INFO][8340] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.154 [INFO][8340] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" iface="eth0" netns="" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.154 [INFO][8340] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.154 [INFO][8340] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.170 [INFO][8347] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.170 [INFO][8347] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.170 [INFO][8347] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.182 [WARNING][8347] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.182 [INFO][8347] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" HandleID="k8s-pod-network.c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Workload="localhost-k8s-whisker--7976686687--sr9b9-eth0" Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.183 [INFO][8347] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:32.186743 env[1250]: 2025-07-14 23:22:32.185 [INFO][8340] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065" Jul 14 23:22:32.199586 env[1250]: time="2025-07-14T23:22:32.186952234Z" level=info msg="TearDown network for sandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" successfully" Jul 14 23:22:32.256762 env[1250]: time="2025-07-14T23:22:32.256721279Z" level=info msg="RemovePodSandbox \"c31c40c74814b9ebee55ad81df2c6252e6f4b23d8ca6eb180c70433058aab065\" returns successfully" Jul 14 23:22:32.370221 env[1250]: time="2025-07-14T23:22:32.370145825Z" level=info msg="StopPodSandbox for \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\"" Jul 14 23:22:32.409000 audit[8320]: USER_ACCT pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.421092 kernel: audit: type=1101 audit(1752535352.409:2042): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.421249 kernel: audit: type=1103 audit(1752535352.414:2043): pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.422270 kernel: audit: type=1006 audit(1752535352.414:2044): pid=8320 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=32 res=1 Jul 14 23:22:32.414000 audit[8320]: CRED_ACQ pid=8320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.414000 audit[8320]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc5d4efe0 a2=3 a3=0 items=0 ppid=1 pid=8320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:32.438529 kernel: audit: type=1300 audit(1752535352.414:2044): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffcc5d4efe0 a2=3 a3=0 items=0 ppid=1 pid=8320 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=32 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 14 23:22:32.438585 kernel: audit: type=1327 audit(1752535352.414:2044): proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:32.414000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 14 23:22:32.438642 sshd[8320]: Accepted publickey for core from 139.178.89.65 port 53860 ssh2: RSA SHA256:XtFLP+nsyPN7YR75cpt5lclh1ThW2mP4NmG7F3yw0l4 Jul 14 23:22:32.421779 sshd[8320]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 14 23:22:32.449207 kernel: audit: type=1105 audit(1752535352.439:2045): pid=8320 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.449274 kernel: audit: type=1103 audit(1752535352.444:2046): pid=8373 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.439000 audit[8320]: USER_START pid=8320 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.444000 audit[8373]: CRED_ACQ pid=8373 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:32.437242 systemd[1]: Started session-32.scope. Jul 14 23:22:32.438079 systemd-logind[1242]: New session 32 of user core. Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.405 [WARNING][8362] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.405 [INFO][8362] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.405 [INFO][8362] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" iface="eth0" netns="" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.406 [INFO][8362] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.406 [INFO][8362] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.466 [INFO][8369] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.467 [INFO][8369] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.467 [INFO][8369] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.494 [WARNING][8369] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.494 [INFO][8369] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.505 [INFO][8369] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:32.509114 env[1250]: 2025-07-14 23:22:32.507 [INFO][8362] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.516838 env[1250]: time="2025-07-14T23:22:32.509902543Z" level=info msg="TearDown network for sandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" successfully" Jul 14 23:22:32.516838 env[1250]: time="2025-07-14T23:22:32.509939027Z" level=info msg="StopPodSandbox for \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" returns successfully" Jul 14 23:22:32.607245 env[1250]: time="2025-07-14T23:22:32.607215213Z" level=info msg="RemovePodSandbox for \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\"" Jul 14 23:22:32.607435 env[1250]: time="2025-07-14T23:22:32.607391494Z" level=info msg="Forcibly stopping sandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\"" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.648 [WARNING][8388] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.648 [INFO][8388] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.648 [INFO][8388] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" iface="eth0" netns="" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.648 [INFO][8388] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.648 [INFO][8388] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.670 [INFO][8395] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.670 [INFO][8395] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.670 [INFO][8395] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.674 [WARNING][8395] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.674 [INFO][8395] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" HandleID="k8s-pod-network.50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Workload="localhost-k8s-coredns--7c65d6cfc9--vjmsz-eth0" Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.676 [INFO][8395] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:32.680525 env[1250]: 2025-07-14 23:22:32.678 [INFO][8388] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4" Jul 14 23:22:32.680525 env[1250]: time="2025-07-14T23:22:32.680503970Z" level=info msg="TearDown network for sandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" successfully" Jul 14 23:22:32.686733 env[1250]: time="2025-07-14T23:22:32.684972723Z" level=info msg="RemovePodSandbox \"50dc99f85d63454288a105570437d4e2583731ec03aa25eeac53a0bb2f25eab4\" returns successfully" Jul 14 23:22:32.719047 env[1250]: time="2025-07-14T23:22:32.719013258Z" level=info msg="StopPodSandbox for \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\"" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.767 [WARNING][8409] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.767 [INFO][8409] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.767 [INFO][8409] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" iface="eth0" netns="" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.767 [INFO][8409] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.767 [INFO][8409] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.796 [INFO][8420] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.796 [INFO][8420] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.796 [INFO][8420] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.807 [WARNING][8420] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.807 [INFO][8420] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.810 [INFO][8420] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:32.817528 env[1250]: 2025-07-14 23:22:32.813 [INFO][8409] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.818964 env[1250]: time="2025-07-14T23:22:32.817549090Z" level=info msg="TearDown network for sandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" successfully" Jul 14 23:22:32.818964 env[1250]: time="2025-07-14T23:22:32.817580331Z" level=info msg="StopPodSandbox for \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" returns successfully" Jul 14 23:22:32.836523 env[1250]: time="2025-07-14T23:22:32.836496738Z" level=info msg="RemovePodSandbox for \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\"" Jul 14 23:22:32.836692 env[1250]: time="2025-07-14T23:22:32.836663483Z" level=info msg="Forcibly stopping sandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\"" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.874 [WARNING][8434] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.874 [INFO][8434] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.874 [INFO][8434] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" iface="eth0" netns="" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.874 [INFO][8434] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.874 [INFO][8434] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.914 [INFO][8441] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.914 [INFO][8441] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.914 [INFO][8441] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.922 [WARNING][8441] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.922 [INFO][8441] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" HandleID="k8s-pod-network.2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Workload="localhost-k8s-calico--kube--controllers--ff54b7cbb--m45xx-eth0" Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.925 [INFO][8441] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:32.929247 env[1250]: 2025-07-14 23:22:32.927 [INFO][8434] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea" Jul 14 23:22:32.929247 env[1250]: time="2025-07-14T23:22:32.928780592Z" level=info msg="TearDown network for sandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" successfully" Jul 14 23:22:32.940660 env[1250]: time="2025-07-14T23:22:32.940340563Z" level=info msg="RemovePodSandbox \"2a1fc40a92e69585694cb184eb9316d87a70c2a0d401a73af49cffdc8c6709ea\" returns successfully" Jul 14 23:22:32.973009 env[1250]: time="2025-07-14T23:22:32.972984057Z" level=info msg="StopPodSandbox for \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\"" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.013 [WARNING][8457] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.013 [INFO][8457] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.013 [INFO][8457] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" iface="eth0" netns="" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.013 [INFO][8457] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.013 [INFO][8457] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.043 [INFO][8464] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.043 [INFO][8464] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.043 [INFO][8464] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.049 [WARNING][8464] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.049 [INFO][8464] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.050 [INFO][8464] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:33.053783 env[1250]: 2025-07-14 23:22:33.052 [INFO][8457] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.054931 env[1250]: time="2025-07-14T23:22:33.053801964Z" level=info msg="TearDown network for sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" successfully" Jul 14 23:22:33.054931 env[1250]: time="2025-07-14T23:22:33.053830285Z" level=info msg="StopPodSandbox for \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" returns successfully" Jul 14 23:22:33.054931 env[1250]: time="2025-07-14T23:22:33.054106205Z" level=info msg="RemovePodSandbox for \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\"" Jul 14 23:22:33.054931 env[1250]: time="2025-07-14T23:22:33.054125593Z" level=info msg="Forcibly stopping sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\"" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.090 [WARNING][8480] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.090 [INFO][8480] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.090 [INFO][8480] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" iface="eth0" netns="" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.090 [INFO][8480] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.090 [INFO][8480] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.141 [INFO][8487] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.141 [INFO][8487] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.141 [INFO][8487] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.152 [WARNING][8487] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.152 [INFO][8487] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" HandleID="k8s-pod-network.955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Workload="localhost-k8s-goldmane--58fd7646b9--mng8c-eth0" Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.154 [INFO][8487] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:33.157965 env[1250]: 2025-07-14 23:22:33.156 [INFO][8480] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789" Jul 14 23:22:33.159299 env[1250]: time="2025-07-14T23:22:33.158503645Z" level=info msg="TearDown network for sandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" successfully" Jul 14 23:22:33.178997 env[1250]: time="2025-07-14T23:22:33.178965659Z" level=info msg="RemovePodSandbox \"955ed8639959c328405c4748f0af4b7b13fd60dbaa16b15cb3d8789379286789\" returns successfully" Jul 14 23:22:33.179402 env[1250]: time="2025-07-14T23:22:33.179384050Z" level=info msg="StopPodSandbox for \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\"" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.232 [WARNING][8501] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.232 [INFO][8501] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.232 [INFO][8501] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" iface="eth0" netns="" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.232 [INFO][8501] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.232 [INFO][8501] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.272 [INFO][8508] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.272 [INFO][8508] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.272 [INFO][8508] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.285 [WARNING][8508] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.285 [INFO][8508] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.290 [INFO][8508] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:33.293630 env[1250]: 2025-07-14 23:22:33.292 [INFO][8501] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.293630 env[1250]: time="2025-07-14T23:22:33.293546972Z" level=info msg="TearDown network for sandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" successfully" Jul 14 23:22:33.293630 env[1250]: time="2025-07-14T23:22:33.293567307Z" level=info msg="StopPodSandbox for \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" returns successfully" Jul 14 23:22:33.295042 env[1250]: time="2025-07-14T23:22:33.293871564Z" level=info msg="RemovePodSandbox for \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\"" Jul 14 23:22:33.295042 env[1250]: time="2025-07-14T23:22:33.293887484Z" level=info msg="Forcibly stopping sandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\"" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.333 [WARNING][8522] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.333 [INFO][8522] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.333 [INFO][8522] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" iface="eth0" netns="" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.333 [INFO][8522] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.333 [INFO][8522] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.369 [INFO][8529] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.369 [INFO][8529] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.369 [INFO][8529] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.378 [WARNING][8529] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.384 [INFO][8529] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" HandleID="k8s-pod-network.1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Workload="localhost-k8s-coredns--7c65d6cfc9--qt22r-eth0" Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.386 [INFO][8529] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:33.390533 env[1250]: 2025-07-14 23:22:33.388 [INFO][8522] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64" Jul 14 23:22:33.394947 env[1250]: time="2025-07-14T23:22:33.390898281Z" level=info msg="TearDown network for sandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" successfully" Jul 14 23:22:33.398113 env[1250]: time="2025-07-14T23:22:33.398088274Z" level=info msg="RemovePodSandbox \"1630031f1a982c02b48aa8b3170911ee2fb5563499be35fad7df1d7008c38b64\" returns successfully" Jul 14 23:22:33.398550 env[1250]: time="2025-07-14T23:22:33.398535346Z" level=info msg="StopPodSandbox for \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\"" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.449 [WARNING][8544] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.449 [INFO][8544] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.449 [INFO][8544] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" iface="eth0" netns="" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.449 [INFO][8544] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.449 [INFO][8544] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.476 [INFO][8551] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.476 [INFO][8551] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.476 [INFO][8551] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.485 [WARNING][8551] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.485 [INFO][8551] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.486 [INFO][8551] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:33.489272 env[1250]: 2025-07-14 23:22:33.487 [INFO][8544] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.490202 env[1250]: time="2025-07-14T23:22:33.489683076Z" level=info msg="TearDown network for sandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" successfully" Jul 14 23:22:33.490202 env[1250]: time="2025-07-14T23:22:33.489705180Z" level=info msg="StopPodSandbox for \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" returns successfully" Jul 14 23:22:33.490202 env[1250]: time="2025-07-14T23:22:33.490033280Z" level=info msg="RemovePodSandbox for \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\"" Jul 14 23:22:33.490202 env[1250]: time="2025-07-14T23:22:33.490052265Z" level=info msg="Forcibly stopping sandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\"" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.541 [WARNING][8565] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" WorkloadEndpoint="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.542 [INFO][8565] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.542 [INFO][8565] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" iface="eth0" netns="" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.542 [INFO][8565] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.542 [INFO][8565] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.586 [INFO][8572] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.586 [INFO][8572] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.586 [INFO][8572] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.592 [WARNING][8572] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.592 [INFO][8572] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" HandleID="k8s-pod-network.d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Workload="localhost-k8s-calico--apiserver--866fb9ff9d--grs5p-eth0" Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.593 [INFO][8572] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 14 23:22:33.595976 env[1250]: 2025-07-14 23:22:33.594 [INFO][8565] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0" Jul 14 23:22:33.596560 env[1250]: time="2025-07-14T23:22:33.596536663Z" level=info msg="TearDown network for sandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" successfully" Jul 14 23:22:33.602645 env[1250]: time="2025-07-14T23:22:33.602608788Z" level=info msg="RemovePodSandbox \"d07ab3d647d813c31cc2849eca56f9938f36c48676c045aa80ca1f9c340fd5f0\" returns successfully" Jul 14 23:22:33.609467 sshd[8320]: pam_unix(sshd:session): session closed for user core Jul 14 23:22:33.618084 kernel: audit: type=1106 audit(1752535353.608:2047): pid=8320 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:33.621906 kernel: audit: type=1104 audit(1752535353.613:2048): pid=8320 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:33.608000 audit[8320]: USER_END pid=8320 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:33.613000 audit[8320]: CRED_DISP pid=8320 uid=0 auid=500 ses=32 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=139.178.89.65 addr=139.178.89.65 terminal=ssh res=success' Jul 14 23:22:33.623195 systemd[1]: sshd@29-139.178.70.103:22-139.178.89.65:53860.service: Deactivated successfully. Jul 14 23:22:33.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@29-139.178.70.103:22-139.178.89.65:53860 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 14 23:22:33.627012 systemd[1]: session-32.scope: Deactivated successfully. Jul 14 23:22:33.627734 systemd-logind[1242]: Session 32 logged out. Waiting for processes to exit. Jul 14 23:22:33.628300 systemd-logind[1242]: Removed session 32.